last executing test programs: 22m45.981008403s ago: executing program 32 (id=149): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x7}, 0x4) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 14m48.046431051s ago: executing program 33 (id=1820): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000000)='./file0\x00') rename(&(0x7f00000031c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003300)='./file3\x00') 11m59.773097545s ago: executing program 4 (id=2376): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setuid(0xee01) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000200)=ANY=[], 0xe) 11m58.726294805s ago: executing program 4 (id=2380): unshare(0x20040600) r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x11, r0, 0xc2945000) fcntl$addseals(r0, 0x409, 0x8) 11m57.698111402s ago: executing program 4 (id=2385): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x2c, r1, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x18) 11m56.389124483s ago: executing program 4 (id=2390): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f00000001c0)='./file1\x00', 0x204040, &(0x7f0000000580)=ANY=[], 0x4, 0xfc0, &(0x7f0000002240)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r0 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)=ANY=[]) 11m54.129333115s ago: executing program 4 (id=2399): r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 11m52.853426769s ago: executing program 4 (id=2405): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x1, 0x0, {@ip4=@loopback}}}]}, 0x38}}, 0x0) 11m49.567260454s ago: executing program 34 (id=2405): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x1, 0x0, {@ip4=@loopback}}}]}, 0x38}}, 0x0) 11m4.466380881s ago: executing program 2 (id=2532): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x4c, r0, 0x801, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x4c}}, 0x40) 11m3.263644725s ago: executing program 2 (id=2536): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000010010000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="dc02000011000400140012800b0001006d61637365630000040002800a0001"], 0x40}}, 0x800) 11m2.110436451s ago: executing program 2 (id=2540): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = eventfd2(0x4f9e1aa, 0x80000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 11m1.057925951s ago: executing program 2 (id=2544): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000000906030200000000000000000200ffff240007800c00018008000140e0000001140017006261746164765f736cb580655f0800000900020073797a31000000000500010007"], 0x4c}}, 0x40c0080) 10m59.518567853s ago: executing program 2 (id=2549): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) fstat(r0, &(0x7f0000000340)) 10m58.282185854s ago: executing program 2 (id=2552): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 10m42.53337815s ago: executing program 35 (id=2552): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 10m9.258410293s ago: executing program 1 (id=2680): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000003040)={&(0x7f0000002d40), 0x6e, 0x0}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002140)="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", 0x2000, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000800) 10m7.66718899s ago: executing program 1 (id=2683): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) ptrace(0x10, r0) ptrace$cont(0x9, r0, 0x5, 0xa349) 10m5.976189265s ago: executing program 1 (id=2687): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 10m4.834868445s ago: executing program 1 (id=2690): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95,uni_xlate=1,shortname=winnt,shortname=winnt,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c73686f72746e616d653d77696e6e742c000000000000009e5fcf6469722c73687865d2068a008e48488cc8642c6e66733d6e6f73"], 0x1, 0x274, &(0x7f00000005c0)="$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") openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000008c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x9, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, '^', 0x3a, './file0', 0x3a, [0x4f, 0x4f, 0x50, 0x46, 0x50, 0x46, 0x46, 0x4f, 0x43, 0x43]}, 0x3d) 10m3.363961836s ago: executing program 1 (id=2694): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r2, 0x7}}, 0x10) 10m0.88778502s ago: executing program 1 (id=2699): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="911001000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200)=r0, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="28010000160001"], 0x128}, 0x1, 0x0, 0x0, 0x880}, 0x48000) 9m56.689222971s ago: executing program 36 (id=2699): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="911001000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200)=r0, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="28010000160001"], 0x128}, 0x1, 0x0, 0x0, 0x880}, 0x48000) 6m40.253114485s ago: executing program 3 (id=3279): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x16, {0x2, 0x4e20, @private}, 'syz_tun\x00'}) 6m38.751210252s ago: executing program 3 (id=3283): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffd, 0x7) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 6m37.588468307s ago: executing program 3 (id=3286): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x100, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040e0402030c", @ANYRES64], 0x7) 6m35.183061952s ago: executing program 3 (id=3293): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nodiscard}]}, 0x3, 0x466, &(0x7f0000000800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 6m33.384385972s ago: executing program 3 (id=3299): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0xc000, @remote}, 0x10) 6m31.525432059s ago: executing program 3 (id=3302): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x200}, 0x1c, &(0x7f0000001a80)=[{&(0x7f0000001700)='\\', 0x1}], 0x1}}], 0x1, 0x8010) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000380)="1a00000009800000", 0x8) 6m28.674763375s ago: executing program 37 (id=3302): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x200}, 0x1c, &(0x7f0000001a80)=[{&(0x7f0000001700)='\\', 0x1}], 0x1}}], 0x1, 0x8010) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000380)="1a00000009800000", 0x8) 6m15.648273557s ago: executing program 9 (id=3345): keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r0 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x3, r0, 0x0, 0x0) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) 6m14.516927246s ago: executing program 9 (id=3348): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x5004}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000140)=0x18) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) 6m12.16237324s ago: executing program 9 (id=3354): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}]]}, 0x30}}, 0x840) 6m10.672945669s ago: executing program 9 (id=3356): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) 6m8.525449384s ago: executing program 9 (id=3360): r0 = socket(0x2c, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f2, &(0x7f0000000500)={'syztnl1\x00', 0x0}) 6m7.553942313s ago: executing program 9 (id=3362): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/oops_count', 0x121000, 0xf3e4ead50c038f00) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x218888, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 6m4.03447116s ago: executing program 38 (id=3362): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/oops_count', 0x121000, 0xf3e4ead50c038f00) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x218888, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 16.120700187s ago: executing program 7 (id=4482): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000880)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={r2, 0x3fb, 0x7e7}, 0x8) 13.977661069s ago: executing program 0 (id=4487): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, 0x0) 12.959714997s ago: executing program 7 (id=4490): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x50) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 12.642288105s ago: executing program 6 (id=4491): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 10.570906204s ago: executing program 7 (id=4496): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa08, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 10.058052929s ago: executing program 0 (id=4497): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3200004, &(0x7f0000000a80)=ANY=[@ANYBLOB="63726561746f723da8fa40b32c6465636f6d706f73652c63726561746f723dbd1c66f52c6e6c733d63703836392c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c666f7263652c00f2d2d783dca321ca066f379066a92598376c0a6fb6ebb186b9be7a1d0debd4c2ce3408ded03a80e9839d59c9e7ee798f53e0387168295df851a241c8ce5a7094002fc55c1a66f9e609ea2409393aeb7f8902fcfb60db30dde50ac8f677ad022ab20fcf35644f0090f1861caf534652a239e63533b1a1d4251af75bb0ab1e3bffcf118f464e5f296a5e488bc804019abdcd6deed70d74ab439ff1b9839c7a8666aefe533565f6c6146cfd6ee47347c7dd230d2bfddd5b171026823367db7821b2c9b936b83cd77a9374bfba82530c6b3267130c"], 0x3, 0x6b4, &(0x7f0000000180)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1245d, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 9.868758685s ago: executing program 8 (id=4498): r0 = userfaultfd(0x801) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x10b500, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup2(r0, r0) ioctl$KVM_IOEVENTFD(r2, 0x40a0ae49, &(0x7f0000000000)={0x4, 0x0, 0x0, r3, 0x100000}) 9.119337899s ago: executing program 6 (id=4500): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1d, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 8.062891252s ago: executing program 8 (id=4501): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030300f8ffffffffffff0500000008000300", @ANYRES32=r2], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) 7.377290359s ago: executing program 6 (id=4502): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='@\t\f'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c09}}, 0x0, 0x0, 0x0}, &(0x7f00000007c0)={0x44, &(0x7f0000000280)={0x20, 0x18, 0x28, "bcce2847ed49859f18aded9e9908d612e9fb24aca886f1b1e773f070ce471d938a98ac0ce9d9f9db"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.333097543s ago: executing program 7 (id=4503): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x2) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) 6.882239391s ago: executing program 8 (id=4504): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002780)=[{0x0}], 0x1}}], 0x2, 0x400122a0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x1, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0xffffffff, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x40}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0xc00000, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x2}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x9, 0x1000, 0x9, 0x9}, {0xe, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0xdd, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x4, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x5, 0x7, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x5, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x3, 0x3, 0x6, 0x800, 0x7}, {0x0, 0x0, 0x3, 0x2, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x6, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x800}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe61, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 6.507644345s ago: executing program 0 (id=4505): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000eeff12"], 0x30}}, 0x0) 6.503351745s ago: executing program 5 (id=4506): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xfe) 5.16319011s ago: executing program 5 (id=4507): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e1e, 0x3, @empty, 0xfff}, 0x1c, 0x0}}], 0x1, 0x60040000) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}}], 0x1, 0x40002142, 0x0) 4.820816327s ago: executing program 0 (id=4508): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 4.698195504s ago: executing program 7 (id=4509): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) r0 = syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0x405e5, 0x10100, 0x0, 0x2e0}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x8, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x35a0}}) io_uring_enter(r0, 0x663e, 0x0, 0x2, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 4.138026929s ago: executing program 5 (id=4510): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) pselect6(0x40, &(0x7f0000000140)={0x1, 0x4, 0x3, 0xff, 0x4, 0xea2b, 0x7, 0x2}, 0x0, &(0x7f00000001c0)={0x9, 0xbb18, 0x2, 0x9, 0x0, 0x4f, 0x3, 0x4}, 0x0, 0x0) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x2, {0x1}}, 0x18) sendmsg$inet(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)=[{0x0, 0x500}, {&(0x7f0000000780)="8af83b42e304bd", 0x7}], 0x2}, 0x0) 3.775737707s ago: executing program 0 (id=4511): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x54}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 3.628739266s ago: executing program 6 (id=4512): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r0) 2.982475561s ago: executing program 0 (id=4513): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000030904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c81000309000905810300020000000904010000020d00000904010102020d00000905820200000000000905030200"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x6, 0x10, 0x10, 0x10, 0x10, 0xe, 0x10, 0x8, 0x40, 0x10, 0x9}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.782927758s ago: executing program 8 (id=4514): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) 2.616770244s ago: executing program 6 (id=4515): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 2.342610433s ago: executing program 5 (id=4516): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023893) shutdown(r0, 0x2) recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)=""/30, 0x1e}], 0x1, &(0x7f0000003780)=""/4078, 0xfee}, 0x4}], 0x1, 0x0, 0x0) 2.092707619s ago: executing program 7 (id=4517): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x70bd26, 0x25dfdbfd, {0xa, 0x80, 0x0, 0x1, 0x0, 0x0, 0xfe, 0x5, 0x3600}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20004000) ptrace(0x10, r0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={0x0}) 1.877572993s ago: executing program 8 (id=4518): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000000400)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c00bee5b9b80cb49c807c85709393a247066e0dbd1d4cc9b14919f9175b3d1ecfca63ba2dfbad53f056c689b3dd30d15dd68dc24fc6ff3f7447a2faf38d23e21b786f25f51f852073754deab2983e8ef71f0f41831db21390b85628876f9cd55cde11c878333a57d8a68ed062dbc69f88ec16a78580"], 0x1, 0x9e15, &(0x7f000000a040)="$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") write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964dee674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a7986cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25afd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e5706000", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 1.22663085s ago: executing program 5 (id=4519): mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 577.196092ms ago: executing program 8 (id=4520): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000780), 0x902, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 156.253447ms ago: executing program 5 (id=4521): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000224bd7000fbdbdf250200000005003d000600008008000b01"], 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x20040000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) 0s ago: executing program 6 (id=4522): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x9) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') kernel console output (not intermixed with test programs): ta cause=failed(directio) comm="syz.7.3051" name="nullb0" dev="devtmpfs" ino=3149 res=0 errno=0 [ 1172.833843][T14193] loop6: detected capacity change from 0 to 512 [ 1172.988385][T14193] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 1173.009187][T14193] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 1173.116035][T14193] EXT4-fs (loop6): 1 truncate cleaned up [ 1173.178528][T14193] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1173.358402][T14193] EXT4-fs (loop6): shut down requested (0) [ 1173.546825][T13649] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1173.762058][T13649] usb 8-1: Using ep0 maxpacket: 8 [ 1173.835292][T13649] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1173.922911][T13649] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.981221][T10631] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1174.075775][T13649] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1174.116016][T14206] netlink: 'syz.9.3057': attribute type 4 has an invalid length. [ 1174.128012][T13649] pvrusb2: ********** [ 1174.132274][T13649] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1174.165790][T13649] pvrusb2: Important functionality might not be entirely working. [ 1174.177187][T14206] netlink: 'syz.9.3057': attribute type 8 has an invalid length. [ 1174.197614][T14206] netlink: 212 bytes leftover after parsing attributes in process `syz.9.3057'. [ 1174.239714][T13649] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1174.340012][T13649] pvrusb2: ********** [ 1174.412258][ T2333] pvrusb2: Invalid write control endpoint [ 1174.679311][T14201] pvrusb2: Invalid write control endpoint [ 1174.760819][ T10] usb 8-1: USB disconnect, device number 4 [ 1175.029385][ T2333] pvrusb2: Invalid write control endpoint [ 1175.035416][ T2333] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1175.120460][ T2333] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1175.189985][ T2333] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1175.245483][ T2333] pvrusb2: Device being rendered inoperable [ 1175.252113][ T2333] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1175.281377][ T2333] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1175.313068][ T2333] pvrusb2: Attached sub-driver cx25840 [ 1175.378019][T14213] loop9: detected capacity change from 0 to 128 [ 1175.385750][ T2333] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1175.427229][ T2333] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1175.511629][T14213] FAT-fs (loop9): Directory bread(block 524322) failed [ 1175.594530][T14213] FAT-fs (loop9): Directory bread(block 524323) failed [ 1175.666632][T14213] FAT-fs (loop9): Directory bread(block 524324) failed [ 1175.696537][T14213] FAT-fs (loop9): Directory bread(block 524325) failed [ 1175.703696][T14213] FAT-fs (loop9): Directory bread(block 524326) failed [ 1175.763989][T14213] FAT-fs (loop9): Directory bread(block 524327) failed [ 1175.804241][T14213] FAT-fs (loop9): Directory bread(block 524328) failed [ 1175.864690][T14213] FAT-fs (loop9): Directory bread(block 524329) failed [ 1176.042200][T14213] FAT-fs (loop9): Directory bread(block 524322) failed [ 1176.069747][T14213] FAT-fs (loop9): Directory bread(block 524323) failed [ 1177.232398][T14226] loop9: detected capacity change from 0 to 512 [ 1177.361304][T14226] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1177.526986][T14226] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1177.699817][T14226] EXT4-fs warning (device loop9): ext4_empty_dir:3087: inode #12: comm syz.9.3065: directory missing '.' [ 1178.228369][T13108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1178.555921][T14236] loop7: detected capacity change from 0 to 64 [ 1181.120784][T14262] loop7: detected capacity change from 0 to 1024 [ 1181.250029][T14262] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1181.307545][T14255] loop8: detected capacity change from 0 to 4096 [ 1181.366706][T14262] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1181.608604][T14262] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: block 3: comm syz.7.3080: lblock 3 mapped to illegal pblock 3 (length 3) [ 1181.758295][T14262] EXT4-fs (loop7): Remounting filesystem read-only [ 1181.840166][T14266] EXT4-fs (loop7): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 15; err -30 [ 1182.266528][ T29] audit: type=1800 audit(1773852099.040:256): pid=14255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3077" name="file1" dev="loop8" ino=0 res=0 errno=0 [ 1182.428317][T12182] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1183.377896][T14273] netlink: 164 bytes leftover after parsing attributes in process `syz.7.3082'. [ 1183.467940][T14275] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3084'. [ 1183.526950][T14275] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3084'. [ 1184.717405][ T9282] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1184.718365][T14284] program syz.8.3088 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1184.937067][ T9282] usb 7-1: Using ep0 maxpacket: 16 [ 1184.974449][ T9282] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1185.003296][ T9282] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1185.037312][ T9282] usb 7-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 1185.101536][ T9282] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.121236][ T9282] usb 7-1: config 0 descriptor?? [ 1185.288885][T14286] loop7: detected capacity change from 0 to 2048 [ 1185.549584][T14286] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1185.570845][T14286] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1185.651807][ T9282] hid (null): bogus close delimiter [ 1185.780885][ T9282] wacom 0003:056A:0084.001D: bogus close delimiter [ 1185.796367][ T9282] wacom 0003:056A:0084.001D: item 0 4 2 10 parsing failed [ 1185.914835][ T9282] wacom 0003:056A:0084.001D: parse failed [ 1185.971284][ T9282] wacom 0003:056A:0084.001D: probe with driver wacom failed with error -22 [ 1186.082683][ T9282] usb 7-1: USB disconnect, device number 10 [ 1186.441614][T12182] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1187.181974][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1187.192883][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1188.794388][T14313] loop3: detected capacity change from 0 to 1764 [ 1189.677330][ T5776] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 1189.823315][ T5776] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 1190.332013][T14319] loop6: detected capacity change from 0 to 4096 [ 1190.944913][ T29] audit: type=1800 audit(1773852107.720:257): pid=14332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3109" name="nullb0" dev="devtmpfs" ino=3149 res=0 errno=0 [ 1191.312730][T14334] sctp: [Deprecated]: syz.7.3110 (pid 14334) Use of int in maxseg socket option. [ 1191.312730][T14334] Use struct sctp_assoc_value instead [ 1193.890665][T14355] loop9: detected capacity change from 0 to 256 [ 1194.061031][T14355] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 1194.329813][T14360] loop6: detected capacity change from 0 to 512 [ 1195.989364][T14372] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3128'. [ 1198.115361][T14390] loop6: detected capacity change from 0 to 2048 [ 1198.363333][T14390] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1198.384722][T14390] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1198.486015][T14390] EXT4-fs (loop6): shut down requested (1) [ 1198.541771][T14400] loop8: detected capacity change from 0 to 164 [ 1198.911513][T14400] Unsupported NM flag settings (240) [ 1198.953304][T14400] Unsupported NM flag settings (240) [ 1198.995995][T10631] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1199.138723][T14402] loop7: detected capacity change from 0 to 512 [ 1202.686851][ T9282] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1202.896549][ T9282] usb 4-1: Using ep0 maxpacket: 16 [ 1202.925224][ T9282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1202.967358][ T9282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1203.054411][ T9282] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1203.112374][ T9282] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1203.198136][ T9282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.285238][ T9282] usb 4-1: config 0 descriptor?? [ 1203.932686][ T9282] microsoft 0003:045E:07DA.001E: ignoring exceeding usage max [ 1204.079470][ T9282] microsoft 0003:045E:07DA.001E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1204.182569][ T9282] microsoft 0003:045E:07DA.001E: no inputs found [ 1204.212815][ T9282] microsoft 0003:045E:07DA.001E: could not initialize ff, continuing anyway [ 1204.344803][ T9282] usb 4-1: USB disconnect, device number 24 [ 1205.200089][T14448] fido_id[14448]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1205.331132][T14450] loop9: detected capacity change from 0 to 2048 [ 1205.547195][T14450] UDF-fs: error (device loop9): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1205.635801][T14450] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 1205.657130][T14450] UDF-fs: Scanning with blocksize 512 failed [ 1205.768690][T14456] netlink: 'syz.3.3162': attribute type 1 has an invalid length. [ 1205.811769][T14456] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3162'. [ 1205.842808][T14450] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1206.136969][ T9282] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1206.377330][ T9282] usb 8-1: Using ep0 maxpacket: 32 [ 1206.435847][ T9282] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1206.497219][ T9282] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1206.520762][ T9282] usb 8-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1206.542716][ T9282] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.565739][ T9282] usb 8-1: config 0 descriptor?? [ 1207.031809][T14459] netlink: 'syz.7.3163': attribute type 1 has an invalid length. [ 1207.103407][ T9282] usb 8-1: USB disconnect, device number 5 [ 1207.295036][T14469] loop8: detected capacity change from 0 to 1024 [ 1207.784783][T14473] loop9: detected capacity change from 0 to 512 [ 1207.874075][ T29] audit: type=1800 audit(1773852124.570:258): pid=14469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3169" name="file1" dev="loop8" ino=2 res=0 errno=0 [ 1207.919898][T14474] hfsplus: bad catalog folder entry [ 1208.029176][T14473] EXT4-fs (loop9): 1 truncate cleaned up [ 1208.267534][T14473] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1209.075207][T13108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1209.657291][T14484] loop7: detected capacity change from 0 to 1764 [ 1213.658507][T14518] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3187'. [ 1213.882647][T14520] netlink: 'syz.8.3188': attribute type 2 has an invalid length. [ 1214.031353][T14522] loop9: detected capacity change from 0 to 512 [ 1214.253598][T14522] EXT4-fs (loop9): 1 truncate cleaned up [ 1214.378598][T14522] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1215.202434][T14533] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3191'. [ 1215.421931][T13108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1217.333011][T14549] netlink: 'syz.8.3198': attribute type 12 has an invalid length. [ 1217.367590][T14549] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3198'. [ 1219.637029][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1219.777722][ T29] audit: type=1326 audit(1773852136.560:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14570 comm="syz.8.3207" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f85f6c code=0x0 [ 1219.887122][ T10] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1219.928684][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.000869][ T10] usb 7-1: Product: syz [ 1220.030753][ T10] usb 7-1: Manufacturer: syz [ 1220.091133][ T10] usb 7-1: SerialNumber: syz [ 1220.160302][ T10] usb 7-1: config 0 descriptor?? [ 1220.766884][ T10] usb 7-1: Firmware: major: 182, minor: 0, hardware type: ATUSB (0) [ 1221.007041][ T10] usb 7-1: failed to fetch extended address, random address set [ 1221.228855][ T10] usb 7-1: USB disconnect, device number 11 [ 1221.409968][T14586] program syz.8.3214 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1223.411389][T14604] loop3: detected capacity change from 0 to 1024 [ 1223.710744][T14604] hfsplus: b-tree write err: -5, ino 2 [ 1223.803479][T14604] hfsplus: bad catalog entry type [ 1224.327497][ T1095] hfsplus: b-tree write err: -5, ino 25 [ 1224.333711][ T1095] hfsplus: b-tree write err: -5, ino 4 [ 1224.412033][ T1095] hfsplus: b-tree write err: -5, ino 2 [ 1224.441843][ T1095] hfsplus: b-tree write err: -5, ino 26 [ 1224.865646][T14619] Invalid ELF header magic: != ELF [ 1225.062540][T14622] loop3: detected capacity change from 0 to 256 [ 1225.141027][T14622] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1225.608917][T14624] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3230'. [ 1225.947187][T14628] loop8: detected capacity change from 0 to 256 [ 1227.021959][T14637] sock: sock_set_timeout: `syz.6.3236' (pid 14637) tries to set negative timeout [ 1229.096827][T14661] loop6: detected capacity change from 0 to 16 [ 1229.171457][T14661] erofs (device loop6): mounted with root inode @ nid 36. [ 1231.317550][T14681] loop7: detected capacity change from 0 to 2048 [ 1231.558106][T14681] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1231.816501][ T9282] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1232.129418][ T9282] usb 10-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1232.166344][ T9282] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.219630][ T9282] usb 10-1: Product: syz [ 1232.224157][ T9282] usb 10-1: Manufacturer: syz [ 1232.283664][ T9282] usb 10-1: SerialNumber: syz [ 1232.363458][ T9282] usb 10-1: config 0 descriptor?? [ 1232.475001][ T9282] i2c-tiny-usb 10-1:0.0: version 6d.cc found at bus 010 address 003 [ 1232.930278][ T9282] (null): failure reading functionality [ 1232.994469][ T9282] i2c i2c-1: connected i2c-tiny-usb device [ 1233.052874][T14694] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3260'. [ 1233.279989][ T9282] usb 10-1: USB disconnect, device number 3 [ 1233.291196][T14700] netlink: 92 bytes leftover after parsing attributes in process `syz.7.3261'. [ 1234.723087][ T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1234.942611][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 1234.977604][ T10] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1235.025300][ T10] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1235.061993][ T10] usb 8-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1235.101960][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1235.141316][ T10] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1235.177661][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.298719][ T10] usb 8-1: config 0 descriptor?? [ 1235.884664][T14709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1235.949685][T14709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1235.977272][T14719] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3271'. [ 1236.066639][T14719] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3271'. [ 1236.078046][T14719] netlink: 'syz.9.3271': attribute type 18 has an invalid length. [ 1236.870019][ T10] usb 8-1: USB disconnect, device number 6 [ 1237.502932][ T9282] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1237.718700][ T9282] usb 10-1: Using ep0 maxpacket: 16 [ 1237.765528][ T9282] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1237.806932][ T9282] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1237.835472][ T9282] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1237.868676][ T9282] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1237.905938][ T9282] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1238.002782][ T9282] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1238.039911][ T9282] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1238.114703][ T9282] usb 10-1: Manufacturer: syz [ 1238.195833][ T9282] usb 10-1: config 0 descriptor?? [ 1239.059009][ T9282] rc_core: IR keymap rc-hauppauge not found [ 1239.077672][ T9282] Registered IR keymap rc-empty [ 1239.104588][ T9282] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1239.192909][ T9282] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1239.282230][ T9282] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1239.431124][ T9282] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input27 [ 1239.528175][ T9282] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1239.637544][ T9282] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1239.706978][ T9282] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1239.767188][ T9282] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1239.824055][ T9282] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1239.886713][ T9282] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1239.949596][ T9282] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1240.036815][ T9282] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1240.088171][ T9282] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1240.160536][ T9282] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1240.252287][ T9282] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1240.300407][T14752] batadv_slave_0: entered promiscuous mode [ 1240.325207][ T9282] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1240.382895][ T9282] usb 10-1: USB disconnect, device number 4 [ 1240.434611][T14752] batman_adv: batadv0: Adding interface: macsec1 [ 1240.533814][T14752] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.608521][T14752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1240.661020][T14752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1240.683959][T14752] batman_adv: batadv0: Interface activated: macsec1 [ 1241.297294][T14754] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1241.337588][T14754] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1241.376829][T14759] loop6: detected capacity change from 0 to 512 [ 1241.395530][T14754] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1241.416732][T14759] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1241.524395][T14754] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1241.550836][T14754] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1241.678624][T14754] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1241.696563][T14759] EXT4-fs (loop6): 1 truncate cleaned up [ 1241.770893][T14759] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1242.588344][T10631] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1242.680290][ T5779] Bluetooth: hci1: command 0x0c1a tx timeout [ 1242.788616][T14773] loop3: detected capacity change from 0 to 512 [ 1242.840393][T14773] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1242.988389][T14773] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3293: invalid indirect mapped block 9 (level 0) [ 1243.065533][T14773] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1243.066337][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1243.082802][ C0] EXT4-fs (loop3): initial error at time 1773852415: ext4_free_branches:1023: inode 11 [ 1243.093089][ C0] EXT4-fs (loop3): last error at time 1773852415: ext4_free_branches:1023: inode 11 [ 1243.144935][T14773] EXT4-fs (loop3): 1 truncate cleaned up [ 1243.175809][T14773] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1243.312760][ T5834] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1243.320918][ T9282] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1243.398784][ T5779] Bluetooth: hci5: command 0x0406 tx timeout [ 1243.526681][ T5834] usb 10-1: Using ep0 maxpacket: 8 [ 1243.565056][ T5779] Bluetooth: hci3: command 0x0c1a tx timeout [ 1243.572606][ T5834] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1243.583678][ T9282] usb 7-1: Using ep0 maxpacket: 32 [ 1243.686797][ T9282] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1243.706833][ T5834] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.757676][ T9282] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1243.776417][ T5834] usb 10-1: Product: syz [ 1243.796900][ T5834] usb 10-1: Manufacturer: syz [ 1243.801853][ T5834] usb 10-1: SerialNumber: syz [ 1243.866843][ T9282] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1243.912655][ T5834] usb 10-1: config 0 descriptor?? [ 1243.926900][ T9282] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1244.030258][ T9282] usb 7-1: Product: syz [ 1244.037319][ T5776] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1244.046478][ T9282] usb 7-1: Manufacturer: syz [ 1244.261060][ T5834] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1244.360120][ T5834] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1244.393309][ T9282] hub 7-1:4.0: USB hub found [ 1244.428095][T14781] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1244.479049][ T5834] usb 10-1: USB disconnect, device number 5 [ 1244.523494][ T1145] Bluetooth: hci4: Frame reassembly failed (-84) [ 1244.748554][ T9282] hub 7-1:4.0: 5 ports detected [ 1244.805787][ T9282] hub 7-1:4.0: insufficient power available to use all downstream ports [ 1245.477407][T12766] Bluetooth: hci5: command 0x0406 tx timeout [ 1245.501643][ T7899] bond0: (slave syz_tun): Releasing backup interface [ 1245.636586][T12766] Bluetooth: hci3: command 0x0c1a tx timeout [ 1245.851478][ T7899] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1245.894154][ T9282] hub 7-1:4.0: hub_hub_status failed (err = -32) [ 1245.920889][ T9282] hub 7-1:4.0: config failed, can't get hub status (err -32) [ 1245.958823][ T75] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1246.027277][ T75] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.084299][ T75] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1246.413670][ T75] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1246.446654][ T5779] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1246.539977][ T75] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.636798][T13649] usb 7-1: USB disconnect, device number 12 [ 1246.667099][ T75] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1247.112410][ T75] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1247.162606][ T75] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.205634][ T75] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1247.452269][ T75] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1247.475605][ T75] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.488349][ T75] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1247.717108][T12766] Bluetooth: hci3: command 0x0c1a tx timeout [ 1248.051114][ T75] bridge_slave_1: left promiscuous mode [ 1248.059426][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.098118][ T75] bridge_slave_0: left allmulticast mode [ 1248.104029][ T75] bridge_slave_0: left promiscuous mode [ 1248.113284][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.632473][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1248.643853][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1249.269321][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1249.406355][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1249.478707][ T75] bond0 (unregistering): Released all slaves [ 1251.068689][ T29] audit: type=1326 audit(1773852423.851:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14808 comm="syz.7.3312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 1251.247780][ T29] audit: type=1326 audit(1773852423.851:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14808 comm="syz.7.3312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 1251.287717][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1251.307483][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1251.321660][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1251.337269][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1251.350323][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1251.796906][T14820] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1252.398045][ T75] hsr_slave_0: left promiscuous mode [ 1252.487286][ T75] hsr_slave_1: left promiscuous mode [ 1252.514869][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1252.573321][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1252.608612][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1252.637617][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1252.858187][ T75] veth1_macvtap: left promiscuous mode [ 1252.892412][ T75] veth0_macvtap: left promiscuous mode [ 1252.913694][ T75] veth1_vlan: left promiscuous mode [ 1252.951978][ T75] veth0_vlan: left promiscuous mode [ 1253.109362][T14836] loop7: detected capacity change from 0 to 64 [ 1253.396928][ T5779] Bluetooth: hci2: command tx timeout [ 1253.413624][ T29] audit: type=1800 audit(1773852426.191:262): pid=14836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3319" name="file1" dev="loop7" ino=22 res=0 errno=0 [ 1253.466054][T14836] syz.7.3319: attempt to access beyond end of device [ 1253.466054][T14836] loop7: rw=0, sector=39, nr_sectors = 28 limit=64 [ 1255.487201][ T5779] Bluetooth: hci2: command tx timeout [ 1256.499367][ T75] team0 (unregistering): Port device team_slave_1 removed [ 1256.685940][ T75] team0 (unregistering): Port device team_slave_0 removed [ 1257.284380][T14867] loop8: detected capacity change from 0 to 256 [ 1257.407344][T14867] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010076, chksum : 0x23d3c8ff, utbl_chksum : 0xe619d30d) [ 1257.561032][ T5779] Bluetooth: hci2: command tx timeout [ 1257.884585][T14862] netlink: 92 bytes leftover after parsing attributes in process `syz.7.3328'. [ 1258.781034][T14876] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3333'. [ 1259.637132][ T5779] Bluetooth: hci2: command tx timeout [ 1260.882304][T14815] chnl_net:caif_netlink_parms(): no params data found [ 1260.954862][T14898] loop7: detected capacity change from 0 to 64 [ 1261.266512][T14903] syz.7.3340: attempt to access beyond end of device [ 1261.266512][T14903] loop7: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 1261.324773][T14903] Buffer I/O error on dev loop7, logical block 512, async page read [ 1261.397073][T14903] syz.7.3340: attempt to access beyond end of device [ 1261.397073][T14903] loop7: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 1261.477338][T14903] Buffer I/O error on dev loop7, logical block 56576, async page read [ 1263.779640][T14815] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.812783][T14928] program syz.7.3350 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1263.837938][T14922] loop8: detected capacity change from 0 to 4096 [ 1263.847575][T14815] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.906752][T14815] bridge_slave_0: entered allmulticast mode [ 1263.967165][T14815] bridge_slave_0: entered promiscuous mode [ 1264.031703][T14922] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1264.079512][T14815] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.126775][T14815] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.134378][T14922] NILFS (loop8): mounting unchecked fs [ 1264.141435][T14815] bridge_slave_1: entered allmulticast mode [ 1264.187156][T14815] bridge_slave_1: entered promiscuous mode [ 1264.426419][T14922] NILFS (loop8): recovery complete [ 1264.433803][ T6136] udevd[6136]: incorrect nilfs2 checksum on /dev/loop8 [ 1264.498452][T14933] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1264.855545][T14815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1264.933953][T14936] loop6: detected capacity change from 0 to 64 [ 1265.029249][T14815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1265.268240][ T29] audit: type=1800 audit(1773852438.051:263): pid=14936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3351" name="file1" dev="loop6" ino=22 res=0 errno=0 [ 1265.538729][ T1145] kworker/u8:11: attempt to access beyond end of device [ 1265.538729][ T1145] loop6: rw=2049, sector=113, nr_sectors = 48 limit=64 [ 1265.624699][ T1145] kworker/u8:11: attempt to access beyond end of device [ 1265.624699][ T1145] loop6: rw=8390657, sector=161, nr_sectors = 1 limit=64 [ 1265.682043][T14815] team0: Port device team_slave_0 added [ 1265.755180][ T1145] Buffer I/O error on dev loop6, logical block 161, lost async page write [ 1265.813322][T14815] team0: Port device team_slave_1 added [ 1265.830302][ T1145] kworker/u8:11: attempt to access beyond end of device [ 1265.830302][ T1145] loop6: rw=8390657, sector=162, nr_sectors = 1 limit=64 [ 1265.965627][ T1145] Buffer I/O error on dev loop6, logical block 162, lost async page write [ 1266.006931][ T1145] kworker/u8:11: attempt to access beyond end of device [ 1266.006931][ T1145] loop6: rw=8390657, sector=163, nr_sectors = 1 limit=64 [ 1266.096418][ T1145] Buffer I/O error on dev loop6, logical block 163, lost async page write [ 1266.165982][ T1145] kworker/u8:11: attempt to access beyond end of device [ 1266.165982][ T1145] loop6: rw=8390657, sector=167, nr_sectors = 1 limit=64 [ 1266.272162][ T1145] Buffer I/O error on dev loop6, logical block 167, lost async page write [ 1266.336703][ T1145] kworker/u8:11: attempt to access beyond end of device [ 1266.336703][ T1145] loop6: rw=8390657, sector=169, nr_sectors = 1 limit=64 [ 1266.379013][ T9282] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1266.423916][ T1145] Buffer I/O error on dev loop6, logical block 169, lost async page write [ 1266.464155][T14815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1266.485426][ T1145] kworker/u8:11: attempt to access beyond end of device [ 1266.485426][ T1145] loop6: rw=8390657, sector=171, nr_sectors = 1 limit=64 [ 1266.518320][T14815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1266.566845][ T1145] Buffer I/O error on dev loop6, logical block 171, lost async page write [ 1266.586890][ T1145] kworker/u8:11: attempt to access beyond end of device [ 1266.586890][ T1145] loop6: rw=8390657, sector=172, nr_sectors = 1 limit=64 [ 1266.607023][ T9282] usb 9-1: Using ep0 maxpacket: 32 [ 1266.625512][T14815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1266.652085][ T1145] Buffer I/O error on dev loop6, logical block 172, lost async page write [ 1266.660235][ T9282] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1266.694961][T14815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1266.715278][ T1145] kworker/u8:11: attempt to access beyond end of device [ 1266.715278][ T1145] loop6: rw=8390657, sector=173, nr_sectors = 1 limit=64 [ 1266.716525][ T9282] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1266.779352][T14815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1266.818549][ T1145] Buffer I/O error on dev loop6, logical block 173, lost async page write [ 1266.831804][ T1145] kworker/u8:11: attempt to access beyond end of device [ 1266.831804][ T1145] loop6: rw=8390657, sector=174, nr_sectors = 1 limit=64 [ 1266.848215][T14815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1266.857386][ T9282] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1266.859954][ T1145] Buffer I/O error on dev loop6, logical block 174, lost async page write [ 1266.886455][ T9282] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1266.895101][ T9282] usb 9-1: Product: syz [ 1266.950670][ T1145] kworker/u8:11: attempt to access beyond end of device [ 1266.950670][ T1145] loop6: rw=8390657, sector=175, nr_sectors = 1 limit=64 [ 1266.986354][ T9282] usb 9-1: Manufacturer: syz [ 1267.082518][ T1145] Buffer I/O error on dev loop6, logical block 175, lost async page write [ 1267.133784][ T9282] hub 9-1:4.0: USB hub found [ 1267.152246][ T1145] kworker/u8:11: attempt to access beyond end of device [ 1267.152246][ T1145] loop6: rw=8390657, sector=176, nr_sectors = 1 limit=64 [ 1267.296830][ T1145] Buffer I/O error on dev loop6, logical block 176, lost async page write [ 1267.308104][ T1145] kworker/u8:11: attempt to access beyond end of device [ 1267.308104][ T1145] loop6: rw=8390657, sector=177, nr_sectors = 1 limit=64 [ 1267.394730][ T9282] hub 9-1:4.0: 5 ports detected [ 1267.407469][ T1145] Buffer I/O error on dev loop6, logical block 177, lost async page write [ 1267.438034][ T9282] hub 9-1:4.0: insufficient power available to use all downstream ports [ 1267.461354][ T1145] kworker/u8:11: attempt to access beyond end of device [ 1267.461354][ T1145] loop6: rw=8390657, sector=179, nr_sectors = 1 limit=64 [ 1267.615898][ T1145] Buffer I/O error on dev loop6, logical block 179, lost async page write [ 1267.625344][ T1145] kworker/u8:11: attempt to access beyond end of device [ 1267.625344][ T1145] loop6: rw=8390657, sector=180, nr_sectors = 1 limit=64 [ 1267.727601][T14950] loop9: detected capacity change from 0 to 512 [ 1267.739396][ T1145] Buffer I/O error on dev loop6, logical block 180, lost async page write [ 1267.856680][T14950] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1268.046591][T14950] EXT4-fs (loop9): 1 orphan inode deleted [ 1268.070468][T14815] hsr_slave_0: entered promiscuous mode [ 1268.084940][T14815] hsr_slave_1: entered promiscuous mode [ 1268.102764][T14815] debugfs: 'hsr0' already exists in 'hsr' [ 1268.112209][T14815] Cannot create hsr debugfs directory [ 1268.127019][T14950] EXT4-fs (loop9): 1 truncate cleaned up [ 1268.135334][T14950] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1268.405948][T14950] EXT4-fs (loop9): shut down requested (1) [ 1268.552855][ T9282] hub 9-1:4.0: hub_hub_status failed (err = -32) [ 1268.596502][ T9282] hub 9-1:4.0: config failed, can't get hub status (err -32) [ 1268.846461][ T9282] usb 9-1: USB disconnect, device number 5 [ 1269.349746][ T9282] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1269.596598][ T9282] usb 8-1: Using ep0 maxpacket: 16 [ 1269.621736][ T9282] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1269.666421][ T9282] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1269.702477][ T9282] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1269.811502][ T9282] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1269.855692][T13108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1269.906610][ T9282] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.963523][ T9282] usb 8-1: config 0 descriptor?? [ 1269.998182][ T1095] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.579414][ T9282] microsoft 0003:045E:07DA.0020: unbalanced delimiter at end of report description [ 1270.661706][ T9282] microsoft 0003:045E:07DA.0020: parse failed [ 1270.681238][ T1095] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.721952][ T9282] microsoft 0003:045E:07DA.0020: probe with driver microsoft failed with error -22 [ 1271.117177][ T1095] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.563341][ T1095] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.695791][ T9282] usb 8-1: USB disconnect, device number 7 [ 1272.584103][ T1095] bridge_slave_1: left allmulticast mode [ 1272.590684][ T1095] bridge_slave_1: left promiscuous mode [ 1272.637635][ T1095] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.675462][ T1095] bridge_slave_0: left allmulticast mode [ 1272.681810][ T1095] bridge_slave_0: left promiscuous mode [ 1272.689049][ T1095] bridge0: port 1(bridge_slave_0) entered disabled state [ 1273.728787][ T1095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1273.835075][ T1095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1273.900661][ T1095] bond0 (unregistering): Released all slaves [ 1275.074476][T12766] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1275.098567][T12766] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1275.120201][T12766] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1275.150756][T12766] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1275.166555][T12766] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1275.898471][ T1095] hsr_slave_0: left promiscuous mode [ 1275.939262][ T1095] hsr_slave_1: left promiscuous mode [ 1276.005106][ T1095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1276.047125][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1276.167624][ T1095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1276.199799][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1276.302755][ T1095] veth1_macvtap: left promiscuous mode [ 1276.309529][ T1095] veth0_macvtap: left promiscuous mode [ 1276.315817][ T1095] veth1_vlan: left promiscuous mode [ 1276.372094][ T1095] veth0_vlan: left promiscuous mode [ 1277.236533][ T5779] Bluetooth: hci3: command tx timeout [ 1277.578737][ T1095] team0 (unregistering): Port device team_slave_1 removed [ 1277.624804][ T1095] team0 (unregistering): Port device team_slave_0 removed [ 1277.645925][T15002] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3374'. [ 1278.753830][T15006] loop6: detected capacity change from 0 to 512 [ 1278.826795][T15006] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1278.982296][T15006] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1279.026247][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1279.032929][ C0] EXT4-fs (loop6): initial error at time 1773852451: ext4_mb_generate_buddy:1315 [ 1279.042532][ C0] EXT4-fs (loop6): last error at time 1773852451: ext4_mb_generate_buddy:1315 [ 1279.096984][T15006] EXT4-fs (loop6): 1 truncate cleaned up [ 1279.105298][T15006] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1279.324955][ T5779] Bluetooth: hci3: command tx timeout [ 1279.390213][T14815] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1279.733017][T14815] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1279.815497][T10631] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1279.862759][T14815] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1280.003860][T14815] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1281.400081][ T5779] Bluetooth: hci3: command tx timeout [ 1281.642899][T14986] chnl_net:caif_netlink_parms(): no params data found [ 1283.086873][T14815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1283.421492][T14815] 8021q: adding VLAN 0 to HW filter on device team0 [ 1283.484898][ T5779] Bluetooth: hci3: command tx timeout [ 1283.588715][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 1283.596590][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1283.768157][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 1283.775744][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1284.491047][T15050] loop6: detected capacity change from 0 to 8192 [ 1284.862184][T15063] netlink: 'syz.8.3391': attribute type 4 has an invalid length. [ 1284.893398][T15063] netlink: 'syz.8.3391': attribute type 4 has an invalid length. [ 1284.947110][T15063] netlink: 'syz.8.3391': attribute type 2 has an invalid length. [ 1284.974816][T15063] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3391'. [ 1285.103416][T14986] bridge0: port 1(bridge_slave_0) entered blocking state [ 1285.139427][T14986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1285.169784][T14986] bridge_slave_0: entered allmulticast mode [ 1285.227296][T14986] bridge_slave_0: entered promiscuous mode [ 1285.298424][T14986] bridge0: port 2(bridge_slave_1) entered blocking state [ 1285.346412][T14986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1285.354469][T14986] bridge_slave_1: entered allmulticast mode [ 1285.410365][T14986] bridge_slave_1: entered promiscuous mode [ 1286.135501][T14986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1286.347092][T14986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1286.987140][T14986] team0: Port device team_slave_0 added [ 1287.068975][T14986] team0: Port device team_slave_1 added [ 1287.666597][T14986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1287.673787][T14986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1287.746320][T14986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1287.908564][T14986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1287.915862][T14986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1288.076464][T14986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1288.278362][ T12] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1288.328106][ T12] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1288.394490][T13894] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1288.448335][T13894] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1289.141172][T14986] hsr_slave_0: entered promiscuous mode [ 1289.162942][T14986] hsr_slave_1: entered promiscuous mode [ 1289.203990][T14986] debugfs: 'hsr0' already exists in 'hsr' [ 1289.254211][T14986] Cannot create hsr debugfs directory [ 1289.657936][T15105] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3403'. [ 1291.312717][T14815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1293.320823][T14815] veth0_vlan: entered promiscuous mode [ 1293.558340][T14815] veth1_vlan: entered promiscuous mode [ 1294.376066][T14815] veth0_macvtap: entered promiscuous mode [ 1294.480977][T14986] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1294.607528][T14986] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1294.793958][T14815] veth1_macvtap: entered promiscuous mode [ 1294.842359][T14986] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1294.990080][T14986] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1295.419731][T14815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1295.626839][T14815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1295.856782][T12909] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.871315][ T1145] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.906069][T15157] loop8: detected capacity change from 0 to 512 [ 1296.057447][ T1145] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.101276][ T56] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.509082][T15157] bio_check_eod: 5 callbacks suppressed [ 1296.509171][T15157] syz.8.3421: attempt to access beyond end of device [ 1296.509171][T15157] loop8: rw=2049, sector=968, nr_sectors = 8 limit=512 [ 1297.853844][T14986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1298.230634][T15180] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3425'. [ 1298.270454][T14986] 8021q: adding VLAN 0 to HW filter on device team0 [ 1298.462054][ T5834] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1298.564661][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 1298.572476][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1298.733002][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 1298.740690][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1298.779083][ T5834] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1298.801453][ T5834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.837001][ T5834] usb 7-1: Product: syz [ 1298.841434][ T5834] usb 7-1: Manufacturer: syz [ 1298.861705][ T5834] usb 7-1: SerialNumber: syz [ 1298.920163][T15183] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3428'. [ 1299.802230][ T5834] rtl8150 7-1:1.0: couldn't reset the device [ 1299.810680][ T5834] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 1300.072840][ T5834] usb 7-1: USB disconnect, device number 13 [ 1300.801798][T13649] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1301.083724][T13649] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.129786][T13649] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1301.215135][T13649] usb 9-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1301.246649][T13649] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.289195][T13649] usb 9-1: Product: syz [ 1301.293626][T13649] usb 9-1: Manufacturer: syz [ 1301.357825][T13649] usb 9-1: SerialNumber: syz [ 1301.427058][T13649] usb 9-1: config 0 descriptor?? [ 1301.518752][T13649] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1301.614886][T13649] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1301.727244][T13649] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1301.787020][T13649] usb 9-1: media controller created [ 1302.042236][T15211] loop6: detected capacity change from 0 to 1024 [ 1302.137224][T13649] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1302.329805][T15211] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1302.693211][T14986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1302.873158][T13649] DVB: Unable to find symbol tda10046_attach() [ 1302.915249][T13649] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1302.969193][T13649] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1303.240104][T13649] dvb_usb_m920x 9-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1303.308060][T10631] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1303.346527][T13649] usb 9-1: USB disconnect, device number 6 [ 1305.309665][T15249] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3440'. [ 1305.409422][T15249] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3440'. [ 1305.610395][T15255] program syz.7.3441 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1306.654236][T14986] veth0_vlan: entered promiscuous mode [ 1306.935431][T14986] veth1_vlan: entered promiscuous mode [ 1307.529397][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1307.572031][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1308.010175][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1308.087624][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1308.175130][T14986] veth0_macvtap: entered promiscuous mode [ 1308.312009][T14986] veth1_macvtap: entered promiscuous mode [ 1308.745178][T14986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1308.979721][T14986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1308.990319][T15282] loop7: detected capacity change from 0 to 1024 [ 1309.193185][T15282] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1309.222094][ T1038] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.306775][ T1038] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.353173][ T1038] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.445569][ T1038] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.070309][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1310.078646][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1310.244392][T12182] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1312.247315][ T3083] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 1312.493962][ T3083] usb 8-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1312.563381][ T3083] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.627932][ T3083] usb 8-1: config 0 descriptor?? [ 1312.700644][ T3083] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1312.969573][ T3083] gp8psk: usb in 128 operation failed. [ 1313.206361][ T3083] gp8psk: FW Version = 196.60.31 (0xc43c1f) Build 2132/57/200 [ 1313.406655][ T3083] gp8psk: usb in 149 operation failed. [ 1313.436469][ T3083] gp8psk: failed to get FPGA version [ 1313.466735][ T3083] gp8psk: usb in 138 operation failed. [ 1313.502258][ T3083] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1313.544971][ T3083] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1313.686540][ T3083] usb 8-1: USB disconnect, device number 8 [ 1314.817317][T15339] program syz.0.3465 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1316.692356][T15359] bond0: entered promiscuous mode [ 1316.786896][T15359] bond_slave_0: entered promiscuous mode [ 1316.818412][T15359] bond_slave_1: entered promiscuous mode [ 1316.919210][T15359] batadv0: entered promiscuous mode [ 1317.015520][T15359] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1319.185851][T15385] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffe [ 1320.065570][T15392] loop6: detected capacity change from 0 to 2048 [ 1320.278768][T15397] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1321.057843][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1321.133014][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1321.492055][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1321.503313][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1322.331012][T15412] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3487'. [ 1322.383946][T15410] loop8: detected capacity change from 0 to 1024 [ 1322.986549][T15420] netlink: 'syz.5.3363': attribute type 3 has an invalid length. [ 1322.994542][T15420] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3363'. [ 1324.388171][T15430] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3491'. [ 1325.308650][T15435] loop6: detected capacity change from 0 to 1764 [ 1328.306002][T15466] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3505'. [ 1328.381814][T15466] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3505'. [ 1328.426451][T15466] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3505'. [ 1329.097668][T13126] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1329.330542][T13126] usb 1-1: Using ep0 maxpacket: 16 [ 1329.407082][T13126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1329.481839][T13126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1329.535915][T13126] usb 1-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 1329.614056][T13126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.655464][T13126] usb 1-1: config 0 descriptor?? [ 1330.325398][T13126] wacom 0003:056A:0084.0021: item fetching failed at offset 0/11 [ 1330.405825][T13126] wacom 0003:056A:0084.0021: parse failed [ 1330.439297][T13126] wacom 0003:056A:0084.0021: probe with driver wacom failed with error -22 [ 1330.548362][T13126] usb 1-1: USB disconnect, device number 2 [ 1331.976552][T15503] loop5: detected capacity change from 0 to 256 [ 1332.421931][T15503] FAT-fs (loop5): Directory bread(block 64) failed [ 1332.463374][T15503] FAT-fs (loop5): Directory bread(block 65) failed [ 1332.544661][T15503] FAT-fs (loop5): Directory bread(block 66) failed [ 1332.565120][T15503] FAT-fs (loop5): Directory bread(block 67) failed [ 1332.657783][T15503] FAT-fs (loop5): Directory bread(block 68) failed [ 1332.721047][T15503] FAT-fs (loop5): Directory bread(block 69) failed [ 1332.793412][T15503] FAT-fs (loop5): Directory bread(block 70) failed [ 1332.839464][T15503] FAT-fs (loop5): Directory bread(block 71) failed [ 1332.894648][T15503] FAT-fs (loop5): Directory bread(block 72) failed [ 1332.943704][T15503] FAT-fs (loop5): Directory bread(block 73) failed [ 1334.460560][T15526] loop0: detected capacity change from 0 to 8 [ 1338.809509][T15570] loop5: detected capacity change from 0 to 64 [ 1343.696959][T15612] loop0: detected capacity change from 0 to 4096 [ 1344.229479][T15612] ntfs3(loop0): ino=3, ntfs_set_state failed, -22. [ 1344.291813][T15612] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 1345.092441][ T13] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22. [ 1345.120082][T14815] ntfs3(loop0): ino=3, ntfs_set_state failed, -22. [ 1345.188094][T14815] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1345.195338][T14815] ntfs3(loop0): ino=3, ntfs_set_state failed, -22. [ 1345.271432][ T12] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22. [ 1348.179353][T15660] RDS: rds_bind could not find a transport for ::d00:0:0:0, load rds_tcp or rds_rdma? [ 1348.307944][T15664] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3576'. [ 1348.559554][T15668] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3576'. [ 1349.994309][T15681] loop6: detected capacity change from 0 to 512 [ 1350.091484][T15681] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1350.248484][T15681] EXT4-fs (loop6): shut down requested (0) [ 1350.308983][T15681] EXT4-fs warning (device loop6): dx_probe:837: inode #2: comm syz.6.3580: Unimplemented hash flags: 0x0001 [ 1350.406368][T15681] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.3580: Corrupt directory, running e2fsck is recommended [ 1350.407084][T15687] loop8: detected capacity change from 0 to 512 [ 1351.352384][T10631] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1354.243630][T15723] loop6: detected capacity change from 0 to 512 [ 1355.612839][T15733] loop0: detected capacity change from 0 to 2048 [ 1355.778990][T15740] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3601'. [ 1355.786699][T15733] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1355.895883][T15740] netlink: 452 bytes leftover after parsing attributes in process `syz.5.3601'. [ 1355.976808][T15740] netlink: 452 bytes leftover after parsing attributes in process `syz.5.3601'. [ 1356.580574][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 1358.077566][T15761] loop0: detected capacity change from 0 to 512 [ 1358.130555][T15761] EXT4-fs: Ignoring removed mblk_io_submit option [ 1358.248647][T15761] EXT4-fs (loop0): can't mount with both data=journal and dax [ 1358.493041][T15765] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3610'. [ 1359.136406][ T29] audit: type=1326 audit(2000000058.300:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15766 comm="syz.7.3611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 1359.291155][ T29] audit: type=1326 audit(2000000058.350:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15766 comm="syz.7.3611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 1359.363448][ T29] audit: type=1326 audit(2000000058.360:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15766 comm="syz.7.3611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 1359.387610][ T29] audit: type=1326 audit(2000000058.360:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15766 comm="syz.7.3611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 1359.413581][ T29] audit: type=1326 audit(2000000058.380:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15766 comm="syz.7.3611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 1359.438097][ T29] audit: type=1326 audit(2000000058.380:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15766 comm="syz.7.3611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 1359.551205][ T29] audit: type=1326 audit(2000000058.400:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15766 comm="syz.7.3611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=353 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 1359.716329][ T29] audit: type=1326 audit(2000000058.400:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15766 comm="syz.7.3611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 1361.177877][T15790] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3619'. [ 1361.267153][T15791] overlayfs: invalid origin (0000) [ 1362.208073][T15801] loop6: detected capacity change from 0 to 256 [ 1363.934610][T15821] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3629'. [ 1364.020814][T15821] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3629'. [ 1364.764079][T15826] netlink: 'syz.6.3631': attribute type 10 has an invalid length. [ 1364.796873][T15826] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3631'. [ 1367.825212][T15859] 9p: Unknown access argument A: -22 [ 1367.963413][T15852] loop5: detected capacity change from 0 to 4096 [ 1368.008591][T15852] EXT4-fs: inline encryption not supported [ 1368.115347][T15852] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1368.272273][T15852] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1368.330699][T15852] System zones: 0-5 [ 1368.450680][T15852] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1369.305850][T14986] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1370.249395][T15884] loop6: detected capacity change from 0 to 8 [ 1371.012949][T15888] loop0: detected capacity change from 0 to 2048 [ 1371.164143][T15880] loop5: detected capacity change from 0 to 4096 [ 1371.311414][T15888] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1371.380192][T15888] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1371.511595][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1371.530094][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1372.155491][T14815] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1373.310730][T15910] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3659'. [ 1376.049549][T15937] loop5: detected capacity change from 0 to 512 [ 1376.314223][T15937] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.3668: inode has both inline data and extents flags [ 1376.406913][T15937] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1376.416323][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1376.432560][ C0] EXT4-fs (loop5): initial error at time 2000000075: ext4_orphan_get:1391: inode 15 [ 1376.442524][ C0] EXT4-fs (loop5): last error at time 2000000075: ext4_orphan_get:1391: inode 15 [ 1376.466771][T15937] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.3668: couldn't read orphan inode 15 (err -117) [ 1376.521556][T15937] loop5: lost filesystem error report for type 5 error -117 [ 1376.549342][T15937] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1377.592431][T14986] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1378.614302][T15960] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3674'. [ 1378.682887][T15960] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3674'. [ 1379.907061][T15975] loop6: detected capacity change from 0 to 64 [ 1380.056423][T15975] minix: block size(59136) > page size(4096) not supported by filesystem [ 1381.431731][T15987] loop6: detected capacity change from 0 to 512 [ 1381.472116][T15987] EXT4-fs: Ignoring removed orlov option [ 1381.553750][T15987] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1381.607122][T15987] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1381.792892][T15987] EXT4-fs (loop6): 1 truncate cleaned up [ 1381.799583][ T5779] Bluetooth: hci3: command tx timeout [ 1381.870484][T15987] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1382.423056][T16000] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3691'. [ 1382.499446][T15987] fscrypt (loop6): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1382.567324][T16002] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3691'. [ 1383.254061][T10631] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1385.649105][ T5313] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1385.817232][T16033] program syz.0.3700 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1385.886545][ T5313] usb 7-1: Using ep0 maxpacket: 16 [ 1385.961995][ T5313] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1386.008456][ T5313] usb 7-1: config 141 has no interfaces? [ 1386.097392][ T5313] usb 7-1: New USB device found, idVendor=05e3, idProduct=1bf0, bcdDevice=ca.00 [ 1386.147419][ T5313] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.177245][ T5313] usb 7-1: Product: syz [ 1386.210781][ T5313] usb 7-1: Manufacturer: syz [ 1386.232266][ T5313] usb 7-1: SerialNumber: syz [ 1386.380278][T16040] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3703'. [ 1386.560666][ T5313] usb 7-1: USB disconnect, device number 14 [ 1387.152446][T16045] program syz.0.3704 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1388.297098][T16060] program syz.8.3710 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1388.919678][T16042] Bluetooth: hci2: command 0x0406 tx timeout [ 1389.631072][T16077] input: syz0 as /devices/virtual/input/input28 [ 1390.548684][T16085] bridge0: port 1(bridge_slave_0) entered blocking state [ 1390.556366][T16085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1392.450281][T16102] loop5: detected capacity change from 0 to 2048 [ 1392.674310][T16102] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1393.013243][ T29] audit: type=1800 audit(2000000092.170:272): pid=16102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3727" name="file2" dev="loop5" ino=1347 res=0 errno=0 [ 1393.637486][T16114] loop8: detected capacity change from 0 to 1024 [ 1394.843847][T10428] hfsplus: request for non-existent node 33554434 in B*Tree [ 1394.884005][T10428] hfsplus: request for non-existent node 33554434 in B*Tree [ 1395.630142][T16131] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3737'. [ 1396.839129][T16149] program syz.6.3743 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1396.867237][T16150] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3740'. [ 1396.975204][T16150] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3740'. [ 1399.966988][T16173] syz_tun: entered promiscuous mode [ 1399.996835][T16178] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 1400.003822][T16178] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1400.042691][T16173] macvtap1: entered promiscuous mode [ 1400.099648][T16178] vhci_hcd vhci_hcd.0: Device attached [ 1400.144243][T16180] vhci_hcd: connection closed [ 1400.147086][ T13] vhci_hcd vhci_hcd.8: stop threads [ 1400.197439][ T13] vhci_hcd vhci_hcd.8: release socket [ 1400.206797][T16184] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3754'. [ 1400.233839][ T13] vhci_hcd vhci_hcd.8: disconnect device [ 1400.294000][ T5313] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 1401.683285][T16199] loop6: detected capacity change from 0 to 512 [ 1401.937578][T16199] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.3758: EA inode hash validation failed [ 1402.023199][T16199] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.3758: corrupted inode contents [ 1402.099323][T16199] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1402.106282][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1402.122442][ C0] EXT4-fs (loop6): initial error at time 2000000357: ext4_do_update_inode:5569: inode 15 [ 1402.132760][ C0] EXT4-fs (loop6): last error at time 2000000357: ext4_do_update_inode:5569: inode 15 [ 1402.168947][T16199] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #15: comm syz.6.3758: mark_inode_dirty error [ 1402.309553][T16199] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1402.312320][T16199] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.3758: corrupted inode contents [ 1402.419219][T16199] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1402.420586][T16199] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2999: inode #15: comm syz.6.3758: mark_inode_dirty error [ 1402.558544][T16199] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1402.560160][T16199] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3002: inode #15: comm syz.6.3758: mark inode dirty (error -117) [ 1402.683363][T16199] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1402.687883][T16199] EXT4-fs warning (device loop6): ext4_evict_inode:275: xattr delete (err -117) [ 1402.746897][T16199] EXT4-fs (loop6): 1 orphan inode deleted [ 1402.811131][T16199] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1403.105254][T16213] netlink: 'syz.7.3761': attribute type 1 has an invalid length. [ 1403.146726][T16213] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3761'. [ 1403.307499][T16213] netlink: 'syz.7.3761': attribute type 1 has an invalid length. [ 1403.493492][T10631] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1404.977026][T16231] bridge0: port 1(bridge_slave_0) entered disabled state [ 1405.171557][T10428] bridge0: port 1(bridge_slave_0) entered blocking state [ 1405.179331][T10428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1406.888991][T16250] loop5: detected capacity change from 0 to 1024 [ 1407.161904][T16250] hfsplus: b-tree write err: -5, ino 2 [ 1407.266800][T16250] hfsplus: bad catalog entry type [ 1408.132464][ T12] hfsplus: b-tree write err: -5, ino 25 [ 1408.167392][ T12] hfsplus: b-tree write err: -5, ino 4 [ 1408.216872][ T12] hfsplus: b-tree write err: -5, ino 2 [ 1408.222870][ T12] hfsplus: b-tree write err: -5, ino 26 [ 1408.676761][T16042] Bluetooth: hci3: command 0x0405 tx timeout [ 1410.307361][T16288] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3785'. [ 1410.635010][T16293] tap0: tun_chr_ioctl cmd 1074025677 [ 1410.717753][T16293] tap0: linktype set to 804 [ 1411.869897][T16303] loop8: detected capacity change from 0 to 2048 [ 1412.024938][T16303] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 1412.077850][T16303] UDF-fs: Scanning with blocksize 512 failed [ 1412.333004][T16303] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1414.933669][T16334] loop8: detected capacity change from 0 to 256 [ 1415.022785][T16334] exfat: Deprecated parameter 'utf8' [ 1415.098693][T16334] exfat: Deprecated parameter 'utf8' [ 1415.484732][T16334] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1416.689935][T16351] loop6: detected capacity change from 0 to 128 [ 1416.765753][T16351] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1416.997222][T16351] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1417.067476][T16351] ext4 filesystem being mounted at /376/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1417.557893][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.080182][T10631] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1418.901542][T16375] loop6: detected capacity change from 0 to 8 [ 1422.157198][ T5313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.916876][ T5313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1425.875760][T16450] erspan0: entered promiscuous mode [ 1428.711049][T16482] loop8: detected capacity change from 0 to 256 [ 1428.752411][T16482] exfat: Deprecated parameter 'utf8' [ 1428.889873][T16482] exfat: Deprecated parameter 'utf8' [ 1428.895495][T16482] exfat: Deprecated parameter 'utf8' [ 1428.936973][T16482] exfat: Deprecated parameter 'namecase' [ 1429.110514][T16482] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 1429.129000][T16484] loop0: detected capacity change from 0 to 1024 [ 1429.287089][T16484] hfsplus: Filesystem is marked locked, mounting read-only. [ 1429.479597][T16484] hfsplus: filesystem is marked locked, leaving read-only. [ 1431.620042][T16506] loop6: detected capacity change from 0 to 2048 [ 1431.864459][T16506] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1432.194056][T16514] loop5: detected capacity change from 0 to 512 [ 1432.302935][T16514] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1432.375224][T16514] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1432.588901][T16514] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.3860: bad orphan inode 131083 [ 1432.601754][T16514] loop5: lost filesystem error report for type 5 error -117 [ 1432.605583][T16514] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1432.951048][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1432.958445][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1433.384506][T16523] loop8: detected capacity change from 0 to 512 [ 1433.391646][T14986] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1433.724266][T16523] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1433.810785][T16523] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1434.339725][T16530] loop5: detected capacity change from 0 to 1024 [ 1434.411580][T16530] EXT4-fs: inline encryption not supported [ 1434.476931][T16530] EXT4-fs: Ignoring removed bh option [ 1434.798954][T16530] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1434.814446][T12762] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1436.014208][T14986] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1436.685474][T16553] loop5: detected capacity change from 0 to 256 [ 1436.933091][T16553] exFAT-fs (loop5): failed to test first cluster bit of root dir(5) [ 1438.388149][T16570] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3878'. [ 1439.805208][T16579] loop6: detected capacity change from 0 to 1024 [ 1439.909469][T16579] EXT4-fs: Ignoring removed orlov option [ 1440.228674][T16579] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1440.666904][T16579] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz.6.3882: unexpected EA_INODE flag [ 1441.184063][T16584] syz.5.3884 (16584): drop_caches: 2 [ 1441.564689][T10631] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1442.450665][T16594] loop0: detected capacity change from 0 to 4096 [ 1442.481487][T16605] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1442.561454][T16605] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 1444.407468][T16619] loop8: detected capacity change from 0 to 2048 [ 1444.513914][T16619] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1444.576835][T16619] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1445.970107][T16627] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3895'. [ 1446.016457][T16627] lo: Master is either lo or non-ether device [ 1446.227383][T16633] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3899'. [ 1446.383452][T16633] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3899'. [ 1446.429032][T16635] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3900'. [ 1446.476389][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 1447.771377][T16648] loop6: detected capacity change from 0 to 128 [ 1447.918386][T16648] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 1448.090304][T16648] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1448.188068][T16648] ext2 filesystem being mounted at /397/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1448.552960][T16648] overlayfs: upper fs needs to support d_type. [ 1448.670529][T16661] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3907'. [ 1448.724165][T16661] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3907'. [ 1449.307166][T10631] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1450.255016][T16673] loop5: detected capacity change from 0 to 1024 [ 1454.159556][T13649] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1454.366365][T13649] usb 6-1: Using ep0 maxpacket: 16 [ 1454.442753][T13649] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1454.491329][T13649] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1454.502402][T13649] usb 6-1: Product: syz [ 1454.567392][T13649] usb 6-1: Manufacturer: syz [ 1454.575809][T13649] usb 6-1: SerialNumber: syz [ 1454.645163][T13649] usb 6-1: config 0 descriptor?? [ 1455.626966][T13649] usb 6-1: USB disconnect, device number 13 [ 1456.513016][ T6136] udevd[6136]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1458.432540][T16741] fuse: Bad value for 'fd' [ 1461.037454][T16766] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3942'. [ 1463.291938][T16788] loop8: detected capacity change from 0 to 64 [ 1463.710180][T16788] BFS-fs: bfs_readdir(): Bad f_pos=00000002 for loop8:00000002 [ 1465.275346][T16796] loop5: detected capacity change from 0 to 4096 [ 1465.699025][T16811] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1468.059439][T16836] netlink: 'syz.7.3968': attribute type 4 has an invalid length. [ 1470.359120][T16860] 9p: Bad value for 'wfdno' [ 1470.938699][T16865] loop8: detected capacity change from 0 to 64 [ 1471.006598][T16865] BFS-fs: bfs_fill_super(): loop8 is unclean, continuing [ 1471.576312][T13126] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1471.793259][T13126] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1471.839303][T13126] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1471.891792][T13126] usb 7-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1471.924319][T13126] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.985872][T13126] usb 7-1: config 0 descriptor?? [ 1472.624547][T13126] hid_parser_main: 21 callbacks suppressed [ 1472.624674][T13126] logitech-djreceiver 0003:046D:C71F.0022: unknown main item tag 0x7 [ 1472.782888][T13126] logitech-djreceiver 0003:046D:C71F.0022: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.6-1/input0 [ 1473.069942][T13126] usb 7-1: USB disconnect, device number 15 [ 1474.342528][T16887] fido_id[16887]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1476.081271][T16911] netem: change failed [ 1477.997199][ T29] audit: type=1326 audit(2000000433.154:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16932 comm="syz.6.4004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5f6c code=0x7ffc0000 [ 1478.138813][ T29] audit: type=1326 audit(2000000433.234:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16932 comm="syz.6.4004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5f6c code=0x7ffc0000 [ 1478.286590][ T29] audit: type=1326 audit(2000000433.234:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16932 comm="syz.6.4004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5f6c code=0x7ffc0000 [ 1478.458528][ T29] audit: type=1326 audit(2000000433.154:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16932 comm="syz.6.4004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5f6c code=0x7ffc0000 [ 1478.585242][ T29] audit: type=1326 audit(2000000433.254:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16932 comm="syz.6.4004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=291 compat=1 ip=0xf7fb5f6c code=0x7ffc0000 [ 1478.774158][ T29] audit: type=1326 audit(2000000433.264:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16932 comm="syz.6.4004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5f6c code=0x7ffc0000 [ 1478.934503][ T29] audit: type=1326 audit(2000000433.264:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16932 comm="syz.6.4004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5f6c code=0x7ffc0000 [ 1479.087239][ T29] audit: type=1326 audit(2000000433.274:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16932 comm="syz.6.4004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5f6c code=0x7ffc0000 [ 1479.241741][ T29] audit: type=1326 audit(2000000433.274:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16932 comm="syz.6.4004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5f6c code=0x7ffc0000 [ 1479.397410][ T29] audit: type=1326 audit(2000000433.294:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16932 comm="syz.6.4004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=292 compat=1 ip=0xf7fb5f6c code=0x7ffc0000 [ 1479.843867][T16951] loop0: detected capacity change from 0 to 256 [ 1479.891237][T16951] exfat: Deprecated parameter 'namecase' [ 1480.004595][T16951] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 1480.175946][T16951] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 1483.652768][T16979] loop8: detected capacity change from 0 to 8192 [ 1483.857429][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1483.857518][ T29] audit: type=1800 audit(2000000439.024:291): pid=16979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4020" name="file1" dev="loop8" ino=1048765 res=0 errno=0 [ 1484.197512][T16997] loop5: detected capacity change from 0 to 1024 [ 1484.373516][T16997] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1484.417668][T16997] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1485.252035][ T1145] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:11: bg 0: block 112: padding at end of block bitmap is not set [ 1485.351586][ T1145] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 117 [ 1485.415569][ T1145] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1485.415569][ T1145] [ 1485.480505][T14986] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1486.572510][T13649] hid-generic 0000:FFFFFFFE:0007.0023: unknown main item tag 0x0 [ 1486.656674][T13649] hid-generic 0000:FFFFFFFE:0007.0023: unknown main item tag 0x0 [ 1486.664818][T13649] hid-generic 0000:FFFFFFFE:0007.0023: unknown main item tag 0x0 [ 1486.766984][T13126] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1486.771310][T13649] hid-generic 0000:FFFFFFFE:0007.0023: unknown main item tag 0x0 [ 1486.845395][ T29] audit: type=1326 audit(2000000441.994:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17021 comm="syz.7.4032" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 1486.867638][T13649] hid-generic 0000:FFFFFFFE:0007.0023: unknown main item tag 0x0 [ 1486.875912][T13649] hid-generic 0000:FFFFFFFE:0007.0023: unknown main item tag 0x0 [ 1486.994683][T13649] hid-generic 0000:FFFFFFFE:0007.0023: unknown main item tag 0x0 [ 1487.036396][T13126] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1487.048227][ T29] audit: type=1326 audit(2000000441.994:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17021 comm="syz.7.4032" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 1487.052810][T13649] hid-generic 0000:FFFFFFFE:0007.0023: unknown main item tag 0x0 [ 1487.105904][T13126] usb 6-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 1487.172084][T13126] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.193830][T13649] hid-generic 0000:FFFFFFFE:0007.0023: unknown main item tag 0x0 [ 1487.197490][ T29] audit: type=1326 audit(2000000442.144:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17021 comm="syz.7.4032" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 1487.243980][T13649] hid-generic 0000:FFFFFFFE:0007.0023: unknown main item tag 0x0 [ 1487.280133][T13126] usb 6-1: config 0 descriptor?? [ 1487.362734][T13126] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1487.393263][ T29] audit: type=1326 audit(2000000442.144:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17021 comm="syz.7.4032" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 1487.395486][T13649] hid-generic 0000:FFFFFFFE:0007.0023: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1487.581146][ T29] audit: type=1326 audit(2000000442.304:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17021 comm="syz.7.4032" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71d5cab code=0x7ffc0000 [ 1487.632574][T13649] usb 6-1: USB disconnect, device number 14 [ 1487.740805][ T29] audit: type=1326 audit(2000000442.404:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17021 comm="syz.7.4032" exe="/root/syz-executor" sig=0 arch=40000003 syscall=91 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 1487.936702][ T29] audit: type=1326 audit(2000000442.464:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17021 comm="syz.7.4032" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71d5cab code=0x7ffc0000 [ 1488.110342][ T29] audit: type=1326 audit(2000000442.464:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17021 comm="syz.7.4032" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf71d5cab code=0x7ffc0000 [ 1488.247338][ T29] audit: type=1326 audit(2000000442.614:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17021 comm="syz.7.4032" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 1488.669303][T17030] fido_id[17030]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1489.741349][T17043] loop5: detected capacity change from 0 to 512 [ 1490.039602][T17043] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1490.055553][T17054] loop0: detected capacity change from 0 to 512 [ 1490.147009][T17043] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1490.285754][T17043] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.4038: corrupted xattr block 32: bad e_name length [ 1490.379235][T17043] EXT4-fs (loop5): Remounting filesystem read-only [ 1490.487686][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1490.487782][ T29] audit: type=1800 audit(2000000445.644:305): pid=17043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4038" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1491.125548][T14986] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1491.198082][T17058] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4042'. [ 1491.308764][T17058] netlink: 277 bytes leftover after parsing attributes in process `syz.7.4042'. [ 1491.416794][T17058] netlink: 277 bytes leftover after parsing attributes in process `syz.7.4042'. [ 1492.172318][T17070] loop5: detected capacity change from 0 to 512 [ 1492.753736][T17073] 9p: Bad value for 'rfdno' [ 1494.394032][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1494.414357][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1494.508766][T17089] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4052'. [ 1494.660495][T17089] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4052'. [ 1495.475285][T17099] loop0: detected capacity change from 0 to 1024 [ 1495.558574][T17099] EXT4-fs: Ignoring removed i_version option [ 1495.614527][T17099] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1495.839442][T17099] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1496.075873][T17099] EXT4-fs (loop0): shut down requested (1) [ 1496.638619][T14815] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1496.810688][T17105] loop5: detected capacity change from 0 to 4096 [ 1498.668572][T17133] GUP no longer grows the stack in syz.5.4068 (17133): 80004000-80005000 (80001000) [ 1498.746637][T17133] CPU: 1 UID: 0 PID: 17133 Comm: syz.5.4068 Tainted: G L syzkaller #0 PREEMPT(full) [ 1498.746851][T17133] Tainted: [L]=SOFTLOCKUP [ 1498.746916][T17133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1498.747021][T17133] Call Trace: [ 1498.747080][T17133] [ 1498.747146][T17133] __dump_stack+0x26/0x30 [ 1498.747400][T17133] dump_stack_lvl+0x14c/0x1c0 [ 1498.747595][T17133] dump_stack+0x1e/0x25 [ 1498.747770][T17133] __get_user_pages+0x44ea/0x5f00 [ 1498.748042][T17133] ? update_cfs_rq_load_avg+0x747/0x8c0 [ 1498.748356][T17133] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1498.748661][T17133] ? update_load_avg+0x14eb/0x25d0 [ 1498.748874][T17133] ? kmsan_get_metadata+0xf1/0x160 [ 1498.749118][T17133] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1498.749370][T17133] __gup_longterm_locked+0x1862/0x2660 [ 1498.749581][T17133] ? gup_fast_fallback+0xf31/0x3b40 [ 1498.749779][T17133] ? filter_irq_stacks+0x49/0x190 [ 1498.750034][T17133] ? stack_depot_save_flags+0x35/0x790 [ 1498.750297][T17133] ? kmsan_get_metadata+0xf1/0x160 [ 1498.750524][T17133] ? kmsan_get_metadata+0xf1/0x160 [ 1498.750754][T17133] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1498.750992][T17133] ? kmsan_get_metadata+0xf1/0x160 [ 1498.751233][T17133] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1498.751495][T17133] gup_fast_fallback+0x3476/0x3b40 [ 1498.751841][T17133] get_user_pages_fast+0xb7/0x120 [ 1498.752061][T17133] __iov_iter_get_pages_alloc+0x988/0x14d0 [ 1498.752356][T17133] ? stack_depot_save_flags+0x35/0x790 [ 1498.752647][T17133] iov_iter_get_pages2+0xa9/0xf0 [ 1498.752847][T17133] __se_sys_vmsplice+0xdd2/0x3230 [ 1498.753190][T17133] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1498.753433][T17133] ? kmsan_get_metadata+0xf1/0x160 [ 1498.753660][T17133] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1498.753894][T17133] ? kmsan_get_metadata+0xf1/0x160 [ 1498.754120][T17133] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1498.754368][T17133] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1498.754577][T17133] ? kmsan_get_metadata+0xf1/0x160 [ 1498.754806][T17133] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1498.755052][T17133] __ia32_sys_vmsplice+0xb8/0x110 [ 1498.755238][T17133] ia32_sys_call+0x358b/0x4360 [ 1498.755407][T17133] __do_fast_syscall_32+0x17f/0x3f0 [ 1498.755682][T17133] do_fast_syscall_32+0x37/0x80 [ 1498.755870][T17133] do_SYSENTER_32+0x1f/0x30 [ 1498.756056][T17133] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1498.756264][T17133] RIP: 0023:0xf70bef6c [ 1498.756395][T17133] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1498.756542][T17133] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 000000000000013c [ 1498.756692][T17133] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000140 [ 1498.756796][T17133] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1498.756888][T17133] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1498.756982][T17133] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1498.757081][T17133] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1498.757229][T17133] [ 1501.078721][T17156] loop8: detected capacity change from 0 to 128 [ 1501.173854][T17156] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1501.884041][ T12] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1503.260800][T17178] loop5: detected capacity change from 0 to 256 [ 1503.310115][T17178] exfat: Deprecated parameter 'utf8' [ 1503.346619][T17178] exfat: Deprecated parameter 'utf8' [ 1503.554813][T17178] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1505.289656][T17200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4092'. [ 1505.407044][T17200] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4092'. [ 1506.678687][T16042] Bluetooth: hci3: command 0x0405 tx timeout [ 1507.527313][T17220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4098'. [ 1509.089675][T17228] loop6: detected capacity change from 0 to 4096 [ 1510.756502][ T5779] Bluetooth: hci5: command 0x0406 tx timeout [ 1511.980114][T17257] ALSA: seq fatal error: cannot create timer (-22) [ 1512.271239][T17261] input: syz1 as /devices/virtual/input/input30 [ 1512.464179][T17253] loop5: detected capacity change from 0 to 4096 [ 1512.847421][T16042] Bluetooth: hci5: command 0x0406 tx timeout [ 1512.912036][T17253] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1513.154380][T17253] EXT4-fs (loop5): shut down requested (2) [ 1513.691511][T14986] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1519.214661][T17340] loop6: detected capacity change from 0 to 2048 [ 1519.451415][T17340] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1519.827508][T17348] ip6_vti0: entered promiscuous mode [ 1523.381348][T17384] loop6: detected capacity change from 0 to 256 [ 1524.248792][T17389] netlink: 'syz.8.4154': attribute type 11 has an invalid length. [ 1526.417004][T17414] loop8: detected capacity change from 0 to 64 [ 1527.655705][T17427] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4167'. [ 1528.174706][T17434] hsr0: entered allmulticast mode [ 1528.192985][T17434] hsr_slave_0: entered allmulticast mode [ 1528.236492][T17434] hsr_slave_1: entered allmulticast mode [ 1528.264938][T17433] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1528.266580][T17397] IPVS: starting estimator thread 0... [ 1528.280754][T17434] hsr0: left promiscuous mode [ 1528.332749][T17440] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4168'. [ 1528.435331][T17440] hsr_slave_0: left promiscuous mode [ 1528.446411][T17439] IPVS: using max 192 ests per chain, 9600 per kthread [ 1528.514327][T17440] hsr_slave_1: left promiscuous mode [ 1528.645427][T17440] hsr0 (unregistering): left allmulticast mode [ 1531.923891][T17475] loop0: detected capacity change from 0 to 1024 [ 1532.010666][T17475] EXT4-fs: Ignoring removed bh option [ 1532.310249][T17475] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1533.260919][T14815] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1534.097246][T17496] Bluetooth: MGMT ver 1.23 [ 1534.101999][T17496] Bluetooth: hci1: invalid length 3, exp 2 for type 9 [ 1538.956536][T17536] loop5: detected capacity change from 0 to 1024 [ 1539.253282][T17536] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1539.375463][T17536] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1540.211820][ T1145] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:11: bg 0: block 112: padding at end of block bitmap is not set [ 1540.321702][ T1145] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117 [ 1540.341454][ T1145] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1540.341454][ T1145] [ 1540.440522][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1540.498870][T14986] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1541.388737][T17556] Invalid argument reading file caps for ./file0 [ 1542.271849][T17563] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.4213'. [ 1542.868645][T17571] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 1546.112482][T17598] pimreg0: renamed from lo [ 1546.246837][T17598] A link change request failed with some changes committed already. Interface pimreg0 may have been left with an inconsistent configuration, please check. [ 1546.278814][ T29] audit: type=1326 audit(2000000501.384:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17599 comm="syz.5.4230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 1546.357189][ T29] audit: type=1326 audit(2000000501.434:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17599 comm="syz.5.4230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 1546.497061][ T29] audit: type=1326 audit(2000000501.434:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17599 comm="syz.5.4230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 1546.626654][ T29] audit: type=1326 audit(2000000501.434:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17599 comm="syz.5.4230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 1546.804495][ T29] audit: type=1326 audit(2000000501.444:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17599 comm="syz.5.4230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 1546.946969][ T29] audit: type=1326 audit(2000000501.444:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17599 comm="syz.5.4230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 1547.101135][ T29] audit: type=1326 audit(2000000501.444:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17599 comm="syz.5.4230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 1547.246556][ T29] audit: type=1326 audit(2000000501.474:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17599 comm="syz.5.4230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 1547.295263][T17610] loop6: detected capacity change from 0 to 512 [ 1547.337515][T17610] EXT4-fs: Ignoring removed orlov option [ 1547.356387][ T29] audit: type=1326 audit(2000000501.484:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17599 comm="syz.5.4230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=247 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 1547.421087][T17610] ext2: Unknown parameter 'nouser_xattr' [ 1547.487381][ T29] audit: type=1326 audit(2000000501.484:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17599 comm="syz.5.4230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 1549.916729][T17634] loop6: detected capacity change from 0 to 256 [ 1549.952090][T17634] vfat: Bad value for 'shortname' [ 1550.768831][T17640] loop8: detected capacity change from 0 to 2048 [ 1550.969602][T17640] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1552.174092][T17648] loop0: detected capacity change from 0 to 1024 [ 1552.221067][T17652] Bluetooth: MGMT ver 1.23 [ 1552.948101][ T34] hfsplus: b-tree write err: -5, ino 25 [ 1552.954324][ T34] hfsplus: b-tree write err: -5, ino 4 [ 1553.015614][ T34] hfsplus: b-tree write err: -5, ino 2 [ 1553.389580][ T10] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 1553.614764][ T10] usb 7-1: config 0 has an invalid interface number: 172 but max is 0 [ 1553.677962][ T10] usb 7-1: config 0 has no interface number 0 [ 1553.738163][ T10] usb 7-1: config 0 interface 172 altsetting 0 has an endpoint descriptor with address 0xC5, changing to 0x85 [ 1553.793402][ T10] usb 7-1: config 0 interface 172 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 1553.851461][ T10] usb 7-1: config 0 interface 172 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1553.924254][ T10] usb 7-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1553.945172][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.980590][ T10] usb 7-1: Product: syz [ 1553.985066][ T10] usb 7-1: Manufacturer: syz [ 1554.038855][ T10] usb 7-1: SerialNumber: syz [ 1554.084336][ T10] usb 7-1: config 0 descriptor?? [ 1554.181806][ T10] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1554.201947][T17666] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4255'. [ 1554.276839][T16042] Bluetooth: hci4: command 0x1003 tx timeout [ 1554.284046][ T5779] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1555.033287][ T10] input: gspca_pac7302 as /devices/platform/dummy_hcd.6/usb7/7-1/input/input31 [ 1555.296333][ T9282] usb 7-1: USB disconnect, device number 16 [ 1555.359164][T17676] loop5: detected capacity change from 0 to 1024 [ 1555.829499][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1555.867869][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1556.033078][T17678] loop8: detected capacity change from 0 to 1024 [ 1556.531400][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 1556.531495][ T29] audit: type=1800 audit(2000000511.684:328): pid=17678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4260" name="file2" dev="loop8" ino=2 res=0 errno=0 [ 1557.069270][T17687] loop5: detected capacity change from 0 to 256 [ 1557.176993][T17687] exfat: Deprecated parameter 'utf8' [ 1557.350433][T17687] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xfadbc78a, utbl_chksum : 0xe619d30d) [ 1557.533917][ T29] audit: type=1800 audit(2000000512.694:329): pid=17687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4263" name="bus" dev="loop5" ino=1048770 res=0 errno=0 [ 1557.675621][ T29] audit: type=1804 audit(2000000512.754:330): pid=17687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.4263" name="/newroot/150/file1/bus" dev="loop5" ino=1048770 res=1 errno=0 [ 1559.069289][T17706] loop0: detected capacity change from 0 to 512 [ 1559.092889][T17706] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1559.242002][T17706] EXT4-fs (loop0): 1 truncate cleaned up [ 1559.338580][T17706] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1560.279348][T14815] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1560.356442][ T10] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1560.576541][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 1560.622996][ T10] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1560.660164][ T10] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1560.691907][ T10] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1560.773492][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1560.820153][ T10] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1560.871584][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.941885][ T10] usb 7-1: config 0 descriptor?? [ 1561.680567][ T10] hid (null): nested delimiters [ 1562.322712][ T10] usb 7-1: USB disconnect, device number 17 [ 1562.713520][T17741] loop5: detected capacity change from 0 to 256 [ 1562.833191][T17741] exfat: Bad value for 'gid' [ 1562.876361][T17741] exfat: Bad value for 'gid' [ 1563.348412][T17749] loop6: detected capacity change from 0 to 256 [ 1563.701227][T17749] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xd22393c8, utbl_chksum : 0xe619d30d) [ 1564.059032][T17751] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4285'. [ 1564.181680][T17751] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4285'. [ 1564.803450][T17755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4287'. [ 1565.093920][T17755] netlink: 'syz.0.4287': attribute type 1 has an invalid length. [ 1565.126785][T17755] netlink: 'syz.0.4287': attribute type 2 has an invalid length. [ 1565.320903][T17761] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4290'. [ 1566.378878][T17772] loop6: detected capacity change from 0 to 256 [ 1566.607400][T17772] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1568.274480][T17785] loop5: detected capacity change from 0 to 512 [ 1568.389949][T17785] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1568.734746][ T29] audit: type=1804 audit(2000000523.894:331): pid=17785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4299" name="/newroot/158/file0/trusted." dev="loop5" ino=1048773 res=1 errno=0 [ 1569.847269][T17794] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4304'. [ 1570.292626][ T9282] kernel read not supported for file /video7 (pid: 9282 comm: kworker/1:0) [ 1572.551225][ T10] IPVS: starting estimator thread 0... [ 1572.561541][T17823] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1572.666710][T17825] IPVS: using max 192 ests per chain, 9600 per kthread [ 1573.070141][T17828] netlink: 'syz.7.4315': attribute type 29 has an invalid length. [ 1573.278890][T17828] netlink: 'syz.7.4315': attribute type 29 has an invalid length. [ 1573.492110][T17828] netlink: 600 bytes leftover after parsing attributes in process `syz.7.4315'. [ 1573.593995][T17828] unsupported nla_type 58 [ 1573.702170][T17833] netlink: 512 bytes leftover after parsing attributes in process `syz.8.4318'. [ 1573.728418][T17835] loop6: detected capacity change from 0 to 256 [ 1574.348297][T17835] FAT-fs (loop6): Directory bread(block 64) failed [ 1574.408014][T17835] FAT-fs (loop6): Directory bread(block 65) failed [ 1574.466780][T17835] FAT-fs (loop6): Directory bread(block 66) failed [ 1574.511465][T17835] FAT-fs (loop6): Directory bread(block 67) failed [ 1574.524159][T17835] FAT-fs (loop6): Directory bread(block 68) failed [ 1574.553211][T17835] FAT-fs (loop6): Directory bread(block 69) failed [ 1574.595116][T17835] FAT-fs (loop6): Directory bread(block 70) failed [ 1574.626856][T17835] FAT-fs (loop6): Directory bread(block 71) failed [ 1574.633881][T17835] FAT-fs (loop6): Directory bread(block 72) failed [ 1574.746329][T17835] FAT-fs (loop6): Directory bread(block 73) failed [ 1574.975063][T17845] Context (ID=0x1) not attached to queue pair (handle=0xffffffff:0x2) [ 1576.119914][T17856] netlink: 428 bytes leftover after parsing attributes in process `syz.6.4326'. [ 1576.166762][T17856] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4326'. [ 1576.954298][ T29] audit: type=1326 audit(2000000532.114:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17857 comm="syz.7.4328" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 1577.085609][ T29] audit: type=1326 audit(2000000532.184:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17857 comm="syz.7.4328" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 1577.252367][ T29] audit: type=1326 audit(2000000532.184:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17857 comm="syz.7.4328" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 1577.366384][ T29] audit: type=1326 audit(2000000532.184:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17857 comm="syz.7.4328" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 1577.486584][ T29] audit: type=1326 audit(2000000532.184:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17857 comm="syz.7.4328" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 1577.634286][ T29] audit: type=1326 audit(2000000532.224:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17857 comm="syz.7.4328" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 1577.752215][ T29] audit: type=1326 audit(2000000532.224:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17857 comm="syz.7.4328" exe="/root/syz-executor" sig=0 arch=40000003 syscall=230 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 1577.880795][ T29] audit: type=1326 audit(2000000532.224:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17857 comm="syz.7.4328" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 1578.030738][ T29] audit: type=1326 audit(2000000532.224:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17857 comm="syz.7.4328" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 1578.153136][ T29] audit: type=1326 audit(2000000532.234:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17857 comm="syz.7.4328" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 1578.401636][T17874] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1578.900624][T17879] netlink: 'syz.5.4337': attribute type 34 has an invalid length. [ 1580.536852][T17891] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 1584.237171][T17920] loop0: detected capacity change from 0 to 512 [ 1584.259957][T17920] EXT4-fs: Ignoring removed nobh option [ 1584.349479][T17920] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1584.474346][T17920] EXT4-fs (loop0): 1 truncate cleaned up [ 1584.510247][T17920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1584.742494][T17920] EXT4-fs (loop0): shut down requested (2) [ 1584.818506][T17920] EXT4-fs (loop0): resizing filesystem from 256 to 1 blocks [ 1584.846814][T17920] EXT4-fs warning (device loop0): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 1585.065603][T17930] loop5: detected capacity change from 0 to 1024 [ 1585.478507][T14815] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1586.556532][T17940] tipc: Started in network mode [ 1586.620969][T17940] tipc: Node identity 4, cluster identity 4711 [ 1586.711645][T17940] tipc: Node number set to 4 [ 1587.644480][T17946] loop8: detected capacity change from 0 to 8 [ 1587.751315][T17946] Dev loop8: unable to read RDB block 8 [ 1587.788337][T17946] loop8: unable to read partition table [ 1587.806998][T17946] loop8: partition table beyond EOD, truncated [ 1587.836977][T17946] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1591.126380][ T10] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1591.403599][ T10] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1591.454600][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1591.521279][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1591.551497][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1591.649293][ T10] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1591.666297][ T10] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1591.690495][ T10] usb 7-1: Manufacturer: syz [ 1591.767773][ T10] usb 7-1: config 0 descriptor?? [ 1592.335101][T17979] team0: Device ipip0 is up. Set it down before adding it as a team port [ 1592.346864][ T10] hid_parser_main: 76 callbacks suppressed [ 1592.346987][ T10] appleir 0003:05AC:8243.0025: unknown main item tag 0x0 [ 1592.552604][ T10] appleir 0003:05AC:8243.0025: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 1592.710046][ T10] usb 7-1: USB disconnect, device number 18 [ 1594.114355][T17986] fido_id[17986]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1594.510346][T17993] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4386'. [ 1596.320329][T18008] loop6: detected capacity change from 0 to 512 [ 1596.399756][T18008] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1596.458811][T18009] netlink: 83 bytes leftover after parsing attributes in process `syz.7.4392'. [ 1596.539505][T18008] EXT4-fs (loop6): 1 truncate cleaned up [ 1596.567064][T18008] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1597.429450][T10631] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1599.258100][T18038] loop5: detected capacity change from 0 to 2048 [ 1599.812153][T18043] batman_adv: batadv0: Adding interface: gretap1 [ 1599.869395][T18043] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1599.917001][T18043] batman_adv: batadv0: Interface activated: gretap1 [ 1601.065072][T18053] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4406'. [ 1601.800627][T18057] loop5: detected capacity change from 0 to 2048 [ 1602.052514][T18057] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1606.274006][T18098] overlayfs: statfs failed on './file0' [ 1607.953377][T18109] loop0: detected capacity change from 0 to 4096 [ 1610.113347][T18132] loop8: detected capacity change from 0 to 512 [ 1610.419133][T18132] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.4442: invalid indirect mapped block 256 (level 2) [ 1610.477065][T18132] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1610.486112][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1610.502373][ C1] EXT4-fs (loop8): initial error at time 2000000565: ext4_free_branches:1023: inode 11 [ 1610.512454][ C1] EXT4-fs (loop8): last error at time 2000000565: ext4_free_branches:1023: inode 11 [ 1610.536865][T18132] EXT4-fs (loop8): 2 truncates cleaned up [ 1610.554023][T18132] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1610.606933][T18139] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1611.252296][T12762] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1611.907775][T18149] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4448'. [ 1612.452097][T18153] loop5: detected capacity change from 0 to 64 [ 1613.647933][T18159] syzkaller1: entered promiscuous mode [ 1613.653751][T18159] syzkaller1: entered allmulticast mode [ 1613.933126][T18162] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4454'. [ 1614.090760][T18162] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4454'. [ 1616.585208][T18190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4467'. [ 1616.691390][T18190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4467'. [ 1617.261725][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1617.273906][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1618.024881][T18201] loop0: detected capacity change from 0 to 1024 [ 1618.394974][T18201] hfsplus: b-tree write err: -5, ino 2 [ 1618.771016][ T5779] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1618.979331][ T56] hfsplus: b-tree write err: -5, ino 4 [ 1619.030608][ T56] hfsplus: b-tree write err: -5, ino 2 [ 1619.289916][T18211] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4472'. [ 1619.441848][T18212] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4472'. [ 1620.500716][ T9282] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1620.666453][ T9282] usb 7-1: Using ep0 maxpacket: 8 [ 1620.724734][ T9282] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1620.769890][ T9282] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1620.802399][ T9282] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1620.874301][ T9282] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1620.976332][ T9282] usb 7-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice= 0.40 [ 1621.009437][ T9282] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.024995][ T9282] usb 7-1: Product: syz [ 1621.035568][ T9282] usb 7-1: Manufacturer: syz [ 1621.052905][ T9282] usb 7-1: SerialNumber: syz [ 1622.325217][ T9282] usb 7-1: USB disconnect, device number 19 [ 1623.469188][T18241] loop5: detected capacity change from 0 to 2048 [ 1623.788857][T18241] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1623.839362][T18248] loop6: detected capacity change from 0 to 128 [ 1623.916799][T18241] EXT4-fs (loop5): shut down requested (1) [ 1623.923689][T18248] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1624.111374][T18248] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1624.310325][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1624.310410][ T29] audit: type=1800 audit(2000000579.454:344): pid=18248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4486" name="file1" dev="loop6" ino=104 res=0 errno=0 [ 1624.392980][T14986] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1625.967217][ T9282] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1626.176809][ T9282] usb 7-1: Using ep0 maxpacket: 32 [ 1626.230638][ T9282] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 1626.271358][ T9282] usb 7-1: config 0 has no interface number 0 [ 1626.306769][ T9282] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1626.339168][ T9282] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1626.362290][ T9282] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.382346][ T9282] usb 7-1: Product: syz [ 1626.413054][ T9282] usb 7-1: Manufacturer: syz [ 1626.437128][ T9282] usb 7-1: SerialNumber: syz [ 1626.489672][ T9282] usb 7-1: config 0 descriptor?? [ 1626.577431][ T9282] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1626.620013][ T9282] em28xx 7-1:0.132: Video interface 132 found: [ 1626.993874][ T9282] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 1627.445014][ T9282] em28xx 7-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1627.539943][ T9282] em28xx 7-1:0.132: board has no eeprom [ 1627.627950][ T9282] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1627.666757][ T9282] em28xx 7-1:0.132: analog set to bulk mode. [ 1627.673267][T13126] em28xx 7-1:0.132: Registering V4L2 extension [ 1627.807057][ T9282] usb 7-1: USB disconnect, device number 20 [ 1627.897926][ T9282] em28xx 7-1:0.132: Disconnecting em28xx [ 1628.313505][T18273] loop0: detected capacity change from 0 to 1024 [ 1629.506658][T13126] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 1629.514421][T13126] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 1629.587596][T13126] em28xx 7-1:0.132: No AC97 audio processor [ 1629.718572][T13126] usb 7-1: Decoder not found [ 1629.723422][T13126] em28xx 7-1:0.132: failed to create media graph [ 1629.757334][T13126] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 1629.788595][T13126] em28xx 7-1:0.132: Remote control support is not available for this card. [ 1629.846745][ T9282] em28xx 7-1:0.132: Closing input extension [ 1629.863745][ T9282] em28xx 7-1:0.132: Freeing device [ 1630.309227][T18287] hfsplus: b-tree write err: -5, ino 2 [ 1630.906945][ T10] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1631.099747][ T1145] hfsplus: b-tree write err: -5, ino 25 [ 1631.117047][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1631.156391][ T1145] hfsplus: b-tree write err: -5, ino 4 [ 1631.177499][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1631.206736][ T1145] hfsplus: b-tree write err: -5, ino 2 [ 1631.212764][ T1145] hfsplus: b-tree write err: -5, ino 26 [ 1631.240570][ T10] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1631.291353][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1631.386304][ T10] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1631.424800][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.469028][ T10] usb 7-1: Product: syz [ 1631.531212][ T10] usb 7-1: Manufacturer: syz [ 1631.566325][ T10] usb 7-1: SerialNumber: syz [ 1631.657455][ T10] usb 7-1: config 0 descriptor?? [ 1632.260967][ T10] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 1632.288713][T18302] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4505'. [ 1632.928332][ T10] usb 7-1: USB disconnect, device number 21 [ 1636.335469][T18330] loop8: detected capacity change from 0 to 128 [ 1636.440125][T18330] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1636.503443][T18330] hpfs: filesystem error: improperly stopped [ 1636.543744][T18330] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1636.559910][T18330] hpfs: You really don't want any checks? You are crazy... [ 1636.587011][T18330] hpfs: hpfs_map_sector(): read error [ 1636.643404][T18330] hpfs: code page support is disabled [ 1636.673504][T18330] hpfs: hpfs_map_4sectors(): unaligned read [ 1636.684232][T18330] hpfs: hpfs_map_4sectors(): unaligned read [ 1636.703589][T18330] hpfs: filesystem error: unable to find root dir [ 1637.725109][ T12] ===================================================== [ 1637.732803][ T12] BUG: KMSAN: uninit-value in n_tty_receive_buf_standard+0xe7b/0xc820 [ 1637.741668][ T12] n_tty_receive_buf_standard+0xe7b/0xc820 [ 1637.748087][ T12] n_tty_receive_buf_common+0x1a59/0x2610 [ 1637.754916][ T12] n_tty_receive_buf2+0x4c/0x60 [ 1637.760123][ T12] tty_ldisc_receive_buf+0xc6/0x2c0 [ 1637.765567][ T12] tty_port_default_receive_buf+0xd7/0x1a0 [ 1637.771814][ T12] flush_to_ldisc+0x43e/0xe40 [ 1637.776852][ T12] process_scheduled_works+0xb82/0x1e80 [ 1637.787031][ T12] worker_thread+0xee4/0x1590 [ 1637.791948][ T12] kthread+0x53f/0x600 [ 1637.801266][ T12] ret_from_fork+0x20f/0x910 [ 1637.807145][ T12] ret_from_fork_asm+0x1a/0x30 [ 1637.812146][ T12] [ 1637.814566][ T12] Uninit was stored to memory at: [ 1637.820056][ T12] n_tty_receive_buf_standard+0xe74/0xc820 [ 1637.827776][ T12] n_tty_receive_buf_common+0x1a59/0x2610 [ 1637.833873][ T12] n_tty_receive_buf2+0x4c/0x60 [ 1637.841317][ T12] tty_ldisc_receive_buf+0xc6/0x2c0 [ 1637.847182][ T12] tty_port_default_receive_buf+0xd7/0x1a0 [ 1637.853266][ T12] flush_to_ldisc+0x43e/0xe40 [ 1637.859322][ T12] process_scheduled_works+0xb82/0x1e80 [ 1637.865113][ T12] worker_thread+0xee4/0x1590 [ 1637.870348][ T12] kthread+0x53f/0x600 [ 1637.874685][ T12] ret_from_fork+0x20f/0x910 [ 1637.879629][ T12] ret_from_fork_asm+0x1a/0x30 [ 1637.884630][ T12] [ 1637.887141][ T12] Uninit was created at: [ 1637.891804][ T12] __kmalloc_noprof+0x486/0x1680 [ 1637.897710][ T12] __tty_buffer_request_room+0x3d4/0x7a0 [ 1637.903700][ T12] __tty_insert_flip_string_flags+0x157/0x6e0 [ 1637.910242][ T12] uart_insert_char+0x368/0x930 [ 1637.915415][ T12] serial8250_read_char+0x1ba/0x670 [ 1637.921022][ T12] serial8250_handle_irq+0x930/0x1110 [ 1637.928528][ T12] serial8250_default_handle_irq+0x116/0x370 [ 1637.934812][ T12] serial8250_interrupt+0xcb/0x420 [ 1637.941084][ T12] __handle_irq_event_percpu+0x13c/0xf90 [ 1637.947184][ T12] handle_irq_event+0xe0/0x2a0 [ 1637.952151][ T12] handle_edge_irq+0x2a9/0xb30 [ 1637.957508][ T12] __common_interrupt+0x9d/0x180 [ 1637.963342][ T12] common_interrupt+0x94/0xb0 [ 1637.968539][ T12] asm_common_interrupt+0x2b/0x40 [ 1637.973789][ T12] [ 1637.976474][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1637.987809][ T12] Tainted: [L]=SOFTLOCKUP [ 1637.992276][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1638.002693][ T12] Workqueue: events_unbound flush_to_ldisc [ 1638.008916][ T12] ===================================================== [ 1638.016240][ T12] Disabling lock debugging due to kernel taint [ 1638.310866][ T12] Kernel panic - not syncing: kmsan.panic set ... [ 1638.317515][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G B L syzkaller #0 PREEMPT(full) [ 1638.328814][ T12] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1638.334495][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1638.344741][ T12] Workqueue: events_unbound flush_to_ldisc [ 1638.350852][ T12] Call Trace: [ 1638.354362][ T12] [ 1638.357425][ T12] __dump_stack+0x26/0x30 [ 1638.361996][ T12] dump_stack_lvl+0x50/0x1c0 [ 1638.366819][ T12] ? dump_stack+0x12/0x25 [ 1638.371386][ T12] dump_stack+0x1e/0x25 [ 1638.375752][ T12] vpanic+0x7b4/0x1430 [ 1638.380197][ T12] panic+0x15d/0x160 [ 1638.384383][ T12] kmsan_report+0x31a/0x320 [ 1638.389324][ T12] ? __msan_warning+0x1b/0x30 [ 1638.394233][ T12] ? n_tty_receive_buf_standard+0xe7b/0xc820 [ 1638.400459][ T12] ? n_tty_receive_buf_common+0x1a59/0x2610 [ 1638.406597][ T12] ? n_tty_receive_buf2+0x4c/0x60 [ 1638.411835][ T12] ? tty_ldisc_receive_buf+0xc6/0x2c0 [ 1638.417557][ T12] ? tty_port_default_receive_buf+0xd7/0x1a0 [ 1638.423830][ T12] ? flush_to_ldisc+0x43e/0xe40 [ 1638.428903][ T12] ? process_scheduled_works+0xb82/0x1e80 [ 1638.434906][ T12] ? worker_thread+0xee4/0x1590 [ 1638.439944][ T12] ? kthread+0x53f/0x600 [ 1638.444446][ T12] ? ret_from_fork+0x20f/0x910 [ 1638.449445][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 1638.454637][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 1638.459821][ T12] ? sysvec_call_function_single+0x4f/0x90 [ 1638.465854][ T12] ? kmsan_get_metadata+0x146/0x160 [ 1638.471344][ T12] ? kmsan_get_metadata+0xf1/0x160 [ 1638.476755][ T12] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1638.483383][ T12] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1638.489705][ T12] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 1638.495856][ T12] ? __wake_up+0x29d/0x2f0 [ 1638.500523][ T12] ? kmsan_get_metadata+0xf1/0x160 [ 1638.505893][ T12] __msan_warning+0x1b/0x30 [ 1638.510627][ T12] n_tty_receive_buf_standard+0xe7b/0xc820 [ 1638.516727][ T12] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1638.523308][ T12] ? kmsan_get_metadata+0xf1/0x160 [ 1638.528681][ T12] ? kmsan_internal_task_create+0x30/0x40 [ 1638.534652][ T12] n_tty_receive_buf_common+0x1a59/0x2610 [ 1638.540698][ T12] n_tty_receive_buf2+0x4c/0x60 [ 1638.545753][ T12] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 1638.551500][ T12] tty_ldisc_receive_buf+0xc6/0x2c0 [ 1638.556963][ T12] tty_port_default_receive_buf+0xd7/0x1a0 [ 1638.563030][ T12] flush_to_ldisc+0x43e/0xe40 [ 1638.567952][ T12] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 1638.574630][ T12] ? __pfx_flush_to_ldisc+0x10/0x10 [ 1638.580104][ T12] process_scheduled_works+0xb82/0x1e80 [ 1638.585966][ T12] worker_thread+0xee4/0x1590 [ 1638.590882][ T12] kthread+0x53f/0x600 [ 1638.595256][ T12] ? __pfx_worker_thread+0x10/0x10 [ 1638.600597][ T12] ? __pfx_kthread+0x10/0x10 [ 1638.605447][ T12] ret_from_fork+0x20f/0x910 [ 1638.610254][ T12] ? __switch_to+0x51c/0x750 [ 1638.615179][ T12] ? __pfx_kthread+0x10/0x10 [ 1638.619995][ T12] ret_from_fork_asm+0x1a/0x30 [ 1638.625012][ T12] [ 1638.628460][ T12] Kernel Offset: disabled [ 1638.632853][ T12] Rebooting in 86400 seconds..